last executing test programs: 6m5.264699205s ago: executing program 0 (id=8025): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000003d80)=[{{&(0x7f0000000000)={0xa, 0x4e28, 0x0, @remote, 0x6}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x590}}, {{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000001d80)="89d678", 0x3}], 0x1}}], 0x2, 0x8008800) 6m4.245858454s ago: executing program 0 (id=8028): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x14, &(0x7f00000001c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x54}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x14, r4}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x10000000}}}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) sendmsg(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) lseek(0xffffffffffffffff, 0x9, 0x0) write$6lowpan_control(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000015c0)={{0x14}, [], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0xa4000960) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r5, &(0x7f0000000840)={0x20f, 0x2, 0x0, {{0x51f, 0xce, 0x0, 0x0, {}, 0x2810000, 0x8, 0x1, 0x0, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, 'pg>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x83\x00\xb5\x00\x00+YN\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1\x00\x00\x00\x00\x00\x00\x00\x00', 0x2, '\x00\x00\x9f\xd2\x8f43\xb6\x02\"K\xdd_MR\xb8=a\xcb\v!\x89A\x16\x95\xef\xe2\xefH\xb2\x11\x1d\x1c6\x04\x82\xe6\xc7\x8e\x1e{\xb8\x8e7\x9d*\xec\xff\xfe\xc3\xa1\x9e^\x17<\x8b\x04\xcfr\f\xa4+\xfd3\x8c\xb7\x0f\xdaP+\x89/\xb0\xdd\x83{\x9e\xc6S\x05\x0f\r|\xdcE\x99\x7f\xa6w;\xbf\xe1\xbdp\xee\x03\xe4\xaf\xb4\x99\xa2\x9b\xd3\xde\xce/F@\xf8V\x02\x1c\xde\xe9\xdcoR\x1e{\xc0jv\xa9\x1eg\xba\x8d\xf3\xcc%:\xbcY\x1a\x15\a\x7f\x89\x92\xeaWv\x80\xff\xec\x87\xa9\x06\xd0(\x8am\xbf2\xa2$\x01T6{\x1e\x05v\x1a;\xac\xde\xab\xba\x82\xb3\xccLFl\xe0\x0e&\x81\xb2\xffk\x94\"\xd8\x01\b\n\x96\xc8\xc8r\xa6\xad\xd7\xd7 D3\x82\xaea\xb3U89\xde#4]\v\xdd\xcc\t\x878\x97\x03\xf81\xa0\x948\x91\xf0\xfa\x9eo\x9b\xb5w\x86\xd9R\xc2\x9a\x8c\xbd\xb8M\xd5\xed~\xd8\xab\xf6\x0f\xacKC\x1b\xbfo\x0e\xc9\x006\xf5\xe4', 0x2f19639a8414712, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8r\x9aE\x1b4\a\xdb\xda\xb2\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00\x13\x12D\xf7s=\xa4*&%\x00\x00\x00_\ro \xe5\xfd\xac\xfb\xa5l\xf3\xe7\xa3\xc0\x14\x19N\x13\xa4\x92G\x7f\x92\'\xe4{\x1a^,)\xee\xec\x05}d\xc2\xb5\x9e\\\xa6\a\x1e\x06l\xa4\x86,\xff\b\x9f\xd5\x9fo\xb8\x8cLi\x14\xd0\x9a\xf7\xf6'}, 0xfffffed4, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300, 0x0, 0x0, 0xee01}}, 0x20f) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000000)=0xffff0018) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r6, 0x4b46, &(0x7f00000000c0)) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f00000005c0)={&(0x7f0000000240), 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0x44, 0x0, 0x4, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x4}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x3ff}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x8000}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x6}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x100}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4000050) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r7, 0x4400ae8f, &(0x7f00000008c0)={"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"}) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @ioapic={0x40000, 0x2, 0x9, 0xffffffff, 0x0, [{0x81, 0xb, 0x3, '\x00', 0xff}, {0x6, 0x3, 0x5, '\x00', 0xcf}, {0x1, 0x2, 0x91, '\x00', 0x6}, {0x4, 0xfd, 0x8, '\x00', 0x97}, {0x9, 0x8b, 0x80, '\x00', 0x8}, {0xfa, 0x9, 0xf, '\x00', 0x6}, {0x7, 0x5, 0x4, '\x00', 0xcf}, {0x7, 0xd, 0xf, '\x00', 0x1}, {0x98, 0x0, 0x4, '\x00', 0xff}, {0x1, 0x1, 0x0, '\x00', 0x9}, {0xd, 0xfd, 0x8f, '\x00', 0x9}, {0x2, 0x5, 0x10, '\x00', 0x5}, {0xf, 0x6, 0x42, '\x00', 0x7f}, {0x9, 0x1, 0x8, '\x00', 0x8}, {0x81, 0x10, 0x4, '\x00', 0x3d}, {0x1, 0xe, 0x2, '\x00', 0x20}, {0x0, 0xc, 0x22, '\x00', 0x5}, {0x20, 0x40, 0x8, '\x00', 0xfc}, {0xb, 0x2, 0x8, '\x00', 0x4}, {0x81, 0x5, 0x9, '\x00', 0x8}, {0x9, 0x2, 0x5, '\x00', 0xa}, {0x9, 0xfc, 0x90, '\x00', 0x21}, {0x4, 0xeb, 0xc0}, {0x6, 0x5, 0x0, '\x00', 0xb}]}}) write(r0, &(0x7f00000000c0)="1c0000001d005f0214fffffffffffff8070000000d00000000000600", 0x1c) 6m0.465791414s ago: executing program 0 (id=8037): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x8000000000000003}, 0x18) sendmmsg$unix(r0, &(0x7f0000005a00)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000d80)="b8", 0x1}], 0x1, 0x0, 0x0, 0x80}}], 0x1, 0x40) 6m0.231318995s ago: executing program 0 (id=8038): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300020000000000fadbdf2500000000000000000000000000000001ac1414bb00000000000000000000000000000004000000000a006080"], 0xb8}, 0x1, 0x0, 0x0, 0xc0c0}, 0x50) r0 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x89f2, &(0x7f0000000040)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=@getsa={0x240, 0x12, 0x8, 0x70bd26, 0x25dfdbfb, {@in=@rand_addr=0x64010101, 0x4d6, 0xa, 0x33}, [@mark={0xc, 0x15, {0x35075b, 0x401}}, @tmpl={0x104, 0x5, [{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d6, 0x2b}, 0xa, @in=@rand_addr=0x64010100, 0x3500, 0x4, 0x1, 0x1, 0xffffffff, 0x5, 0x8}, {{@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x4d5, 0xff}, 0xa, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x3505, 0x1, 0x2, 0x2, 0x9, 0x3, 0x200}, {{@in6=@empty, 0x4d5, 0x32}, 0xa, @in6=@loopback, 0xfff, 0x4, 0x2, 0x5, 0xffff, 0x8, 0x4}, {{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x4d6, 0x6c}, 0x2, @in6=@remote, 0x3506, 0x3, 0x0, 0x4, 0x1, 0x9, 0x4}]}, @lifetime_val={0x24, 0x9, {0x4, 0x7, 0x1, 0x6}}, @algo_auth_trunc={0xe3, 0x14, {{'sha3-224\x00'}, 0x4b8, 0x80, "a03f3f0e830863c6b8c9055c4f59e4b1c16402a11226729874861a0447f12f20c9e040d5f8bab0576ecae3d016a24b2469565655e6da3c0a07a9c0a08d505b3bce8dcd133f952617ae737c991c604b2cbd5914f5976fa48734cd5d57dd6b2dc62a7fbd9c31142803431ec8aae24d95e9a6cec6bd799e9081c7e0ab0a1cdc838d44c87b5a9449fbb60191214a06baaabdcd5fb9a8bd0d5e"}}]}, 0x240}, 0x1, 0x0, 0x0, 0x20008055}, 0x200c000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e00"], 0xb8}, 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b40000001300e9990000000000000000ff020000000000000000000000000001ac1e000100000079518500000000000000000000000000000000000a00400000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000000000000000000a30a000000000000f8ffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000800"/108], 0xb4}, 0x1, 0x0, 0x0, 0x40000c0}, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_INVAL_ENTRY(r3, &(0x7f0000000380)={0x26, 0x3, 0x0, {0x1, 0x5, 0x0, 'fuse\x00'}}, 0x26) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r5, &(0x7f0000000540)=[{0x0}, {&(0x7f00000000c0)="421922", 0x3}, {&(0x7f0000000400)="84", 0x1}, {&(0x7f0000000480)="bc9e8bcd5d82b9140e6ae24f68afeef86ace90c3c9a747062ac59b80da7030629933dc3a0755101bfdfed564310107cb19a1767ab47f92f84517712a5ab6cae9ee321cbcd5ca12dad54a1abe47b280b8f36b5bc933dfc1e36d01c480f7b1cfe772752b24fb9c7bbe8112cdc6ddfe153a2fdefb970e03478fbb0ffe049bbab3ffc08a2beeb0b90b8ebec6ede792e05c42b8702efe207a", 0x96}], 0x4) syz_mount_image$fuse(&(0x7f00000002c0), &(0x7f0000000340)='./file0\x00', 0x2000020, &(0x7f00000011c0)=ANY=[], 0x0, 0x0, 0x0) 6m0.009624145s ago: executing program 0 (id=8040): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x1d, 0x2, 0x6) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000000), &(0x7f0000000040)=0xc) r1 = fsopen(&(0x7f0000000080)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x18) symlinkat(&(0x7f0000000000)='.\x00', r2, &(0x7f0000000140)='./file0\x00') openat2(r2, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x8}, 0x18) 5m59.165868677s ago: executing program 0 (id=8044): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x180, 0x2, 0x0, 0x0, 0xfffffffb) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 5m57.792620516s ago: executing program 32 (id=8044): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x180, 0x2, 0x0, 0x0, 0xfffffffb) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 25.608987684s ago: executing program 2 (id=9164): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000940)={0x60, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {0xfffffffe}, {}, {}, 0x0, 0x80}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000200)=0x100, 0x4) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000240), &(0x7f0000000280)=0x30) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x80000d, 0x13, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r4, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)={0x44, r5, 0x100, 0x1ff, 0x25dfdbff, {{}, {@val={0x0, 0x3, r6}, @val={0x1f, 0x99, {0x7, 0x68}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xffffffffffffff35}, @NL80211_ATTR_MPATH_NEXT_HOP={0x0, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000801}, 0x40000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x118, &(0x7f0000000000)=0xa, 0x0, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r9 = getpid() r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000001140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r11, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010826bd70599a2fed4b974a9a0008000300", @ANYRES32=r12, @ANYBLOB="08006b006801000008006b001c02000008006b006e00000008006b000a00000008006b001c02000008006b006e00000008006b001400000008006b003c00000008006b006801000008006b"], 0x6c}, 0x1, 0x0, 0x0, 0x4008800}, 0x20004010) r13 = syz_pidfd_open(r9, 0x0) setns(r13, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x8000, &(0x7f0000001dc0)={0x9, 0x72}, 0x49) r14 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r15 = ioctl$KVM_CREATE_VCPU(r14, 0xae41, 0x1) ioctl$KVM_SET_SREGS2(r15, 0x4140aecd, &(0x7f0000000140)={{0xfffeffff, 0x1000, 0xf000, 0x9, 0x80, 0xb, 0x80, 0xff, 0x0, 0x84, 0x0, 0xb}, {0x6002, 0xd000, 0x9, 0x3, 0x3, 0x7, 0x6, 0x5, 0x1, 0x4, 0x2, 0xe}, {0xffff1000, 0x8000000, 0x8, 0x4, 0x10, 0x81, 0x4, 0x13, 0x5, 0x4, 0x92, 0x80}, {0x100000, 0x4, 0xe, 0x7, 0x1, 0x40, 0x2, 0x0, 0xfd, 0x29, 0x9, 0x9}, {0x80a0000, 0xdddd0000, 0xf, 0x9, 0x80, 0x2, 0xfd, 0x9, 0x2, 0x6e, 0x2, 0x8}, {0x4000, 0xd000, 0xe, 0x2, 0xaa, 0x2, 0x5, 0x5, 0x3, 0x10, 0x6, 0x3}, {0xf000, 0x10000, 0x3, 0x0, 0xcd, 0x5, 0x5, 0x26, 0x8, 0xcd, 0xff, 0x6}, {0x6000, 0x10000, 0xd, 0xe, 0x93, 0x40, 0xff, 0x15, 0x7b, 0x1, 0xf, 0x8}, {0x100000, 0x5}, {0x80a0000, 0xff81}, 0x80000003, 0x0, 0x6000, 0x1a1, 0x5, 0xfc01, 0x8000900, 0x0, [0xb, 0x2, 0x3, 0x1be]}) sendmmsg$unix(r7, &(0x7f00000bd000), 0x0, 0x4004051) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=0000000000000000000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) 24.945317454s ago: executing program 2 (id=9166): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x5, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, [@map_val={0x18, 0x3, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000000000)='syzkaller\x00', 0xb, 0x0, 0x0, 0x48010000}, 0x94) 23.625755748s ago: executing program 2 (id=9168): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) r2 = syz_open_dev$vbi(&(0x7f0000000f40), 0x0, 0x2) ioctl$VIDIOC_DQBUF(r2, 0xc044560f, &(0x7f0000000fc0)=@multiplanar_userptr={0x600000, 0x5, 0x4, 0x400, 0x0, {0x0, 0xea60}, {0x5, 0x0, 0x7, 0x4, 0x17, 0x7, "d7efaaae"}, 0x400, 0x2, {0x0}, 0x2}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x8000800000000003}, 0x18) r3 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x23}) io_uring_enter(r3, 0x100048ed, 0x0, 0x2, 0x0, 0x0) 10.673055325s ago: executing program 1 (id=9203): bpf$MAP_CREATE(0x0, 0x0, 0x48) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$int_in(r2, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) sendto$inet6(r2, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) ppoll(&(0x7f00000003c0)=[{r2, 0x2000}], 0x1, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) recvmmsg(r4, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f0000000340)=""/240, 0xf0}, {&(0x7f0000000440)=""/96, 0x60}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x4}, 0x1}], 0x1, 0x20, 0x0) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x10541) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r5) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') ppoll(&(0x7f0000000340)=[{r6, 0x4080}, {r6, 0x8}], 0x2, 0x0, 0x0, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x421, 0x989c0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f00000003c0)={0x0, 0x4a}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@gettclass={0x1f, 0x2a, 0x8a0, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x3}, {0xa, 0x11}, {0x6, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x48040}, 0x40c0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c09000304240202042402000424"], 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r8 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='0.,:\x00', 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 9.536561104s ago: executing program 5 (id=9206): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0xacb0, 0x400000000}, 0x400, 0x6e6bc0}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xf8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x80, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xfffffffffffffffe}, {0x0, 0x0, 0x40000000000000}, 0x0, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@private2, 0x0, 0x33}, 0xa, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x2, 0x3, 0x4, 0x0, 0x2}]}]}, 0xf8}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000300000001"], 0xfdef) 8.880280154s ago: executing program 5 (id=9209): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000680)={0x15, 0x110, 0xfa08, {0xffffffffffffffff, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x4e23, @remote}, @ib={0x1b, 0x57c, 0x7, {"72d608a86db158b52e5e4b9b595f8a87"}, 0x80000001, 0x7, 0x1}}}, 0x118) 8.483125625s ago: executing program 5 (id=9210): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xb4, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0xfffffffffffffffd, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x1}, {0x0, 0x4000000000000000, 0x200000000000}, 0x0, 0x0, 0x1}}, 0xb4}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) pipe(0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) ioctl$VIDIOC_G_PARM(0xffffffffffffffff, 0xc0cc5615, &(0x7f0000000ec0)={0xe, @output={0x1000, 0x1, {0x3ff, 0x800}, 0x2, 0xcb}}) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) syz_usb_connect(0x4, 0x0, 0x0, 0x0) 7.31068138s ago: executing program 1 (id=9214): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$unix(r0, &(0x7f0000006980)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000300)=[{&(0x7f0000000580)="d58a1b8e1eb75e7861744263f6387545e2a8a7bdd54ac8692dbccd7598a462b003fc390b938dffde1a71ec0b955d3ca0337924e83ace124d2bbc33d4faa115368c45461c37c1b6459fee9401e65331208fe41444eb0300a5eac4cbdaffbf4b4f4443caaa5194b557403928f9f66895552377b78ea279508bf15fed488a08ad4af3604b48e37cb3", 0x87}, {&(0x7f00000000c0)="7b3ffd4f41af8bf95921f73aa263e07f25c7c591548fd3ffec4a46e5dc386414a698266cf8952e2aa5c5", 0x2a}, {&(0x7f0000000a40)="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", 0xff}, {&(0x7f00000007c0)="d12977952a297d3f297dcf9ab994cb52f664192a2e194411464f7478967863751488c2e29fb17ae577f24afd1369a0859e843495f95cf6280c606bb6335479c0e30b31cf108626ccc9425c07a8c95567e0bb588b6b54b2a9100ece092da8e745d82497027cd9dce111e509b054278b7d09d19133198edc5eccd95168a249802097cc45191b3312a542e26fa92b6effd97451955e16ca09042cd4db658466fc3796ae09b2168ec8ecdb4db3f1b1f81813f8d6fcf5f5ff74ce522c5950b6fdfc", 0xbf}, {&(0x7f0000000b40)="63f023b69cdc5977aedbe7fed7b7f5e646129e3e0f9a2e9253a8eb46d3055126b4a6dda0b31b9b75cda0d87a6e65e6cd132c2321ea75a0f0cdfee189c7ff46afc4c1133afafd46a0115655fd5fcae8ca20df2a804df5f7b81f49eb44852a3f3fef22d7790da45d8f32f12befb38ef0538612244e3c733e98ea849f774a20aa664ac6ea88", 0x84}, {&(0x7f00000001c0)="56a651926bb98e677c329ec8a5b450728e557d06", 0x14}, {&(0x7f0000000c00)="f7a06d44bb69006d6c5e00a15c8bd7aed2bb766207c944f64f35b3e2f23e6a163c4f321c58c401708dd8fb2d65634b57fa2ba9d849808b95e353e4745f4b4fc907eb0246c908818c147e3724db186de466afa9df9625a2dc4a74beb8634843f8ddff787f620825c605a9871d2e9d62eef1b180f8f2eeb57f93908413b528308b2e79c815a0c58d5c426caa7272c709a1fb942cbb983e5f72b1d5c84d587730e16ba34dcdbe48cb59f9a7de62ce5505d6ca9270ca5af35a6717948830129a063a7b9d2bbdbb4b8af60ed09118f13461d7e443075949adce663a3cb167bfa2417fbac8", 0xe2}], 0x7, 0x0, 0x0, 0x4000001}}, {{&(0x7f0000000640)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000d00)="b7de115cc746e5decd42280e11d142064611ca9c5eff7a46bce0d69619c000eb36949e161381afbce99932c64c93c3099b70e42b784eec0ed0f88f2e82de242e622cfbba5f704d54d8405b8c3db4b330855f776e9b7cb2919ae28865cdc35e4609fdb125b87206b4c2532412e0eec54cc96e32920e3f67f29f56122966afbdfabb36cb9c2c0494f76202", 0x8a}, {&(0x7f0000000dc0)="b501a4dcc4d8dee0a9c9ba301ed22fd86ffe9f4f0446434a602a3bc064c77946718a29b8679942cc33171e8652f79560ca864e5a2d829481f6d0b3dfc6706f2eea52fc20c1b0cafccbe5b88862787c5ec43ab2fe98eae5f9fdc869dc07dd8ae12d07274ccef468a8572b7bd923395b5729da37cfa96e426f77a14ac4c62b4b4bd0ed", 0x82}], 0x2, &(0x7f0000000f80)=[@rights={{0x10, 0x1, 0x1, [r1]}}, @cred={{0x18, 0x1, 0x2, {0xffffffffffffffff}}}], 0x28, 0x4000}}, {{0x0, 0x0, &(0x7f0000003200)=[{&(0x7f0000000fc0)="0164774a219a3b6d8bab95cbc45f14c0bfe32dbd627c4d96aad0f3a432d79be91eef9a83e4f0a47130017f5fb9effd6955e9753617514a05019cfc8b8a570faff4cb9b84", 0x44}, {&(0x7f0000000e80)}, {&(0x7f0000001180)="13783f394a28cea180ad2fb6981b9d1ab373b8cbfad65ac4ba44c5c6246abcf2930a", 0x22}, {&(0x7f0000001100)="3c83aa1453a072812703d9441d80ed5aca0655b2e169e4221e6f85", 0x1b}, {&(0x7f0000001200)="b7a7d3b54eae020468074da51e9af3d0c0c0cd0f72a68c5c62001e9d4f6fa0ffc8d491fd1887d633d75ac3f63bb2e59a72da37d6d5f0bd74afca775279162ed8667f145cdb990352444ec7b7f959445846f862ad5a4207b53b8d6e9de44e942fde051e9ba78d3ac7da64dc68e7c89237781a4ce6d237ab5ad24bd4f5bf067dbe7f4fbc2528384e2b2a624a91456c2094ac25a3634183676d79af32887a184caee7f21238beacef98d7aeedec6aa3bb126e6129f9aa886686428ae08a2b150290c001a6108b31da1bfb28f9cfa84621897b8d1f8f65303f9a12f03da56ed62ab796d0c8b76af2e3d0656a61fbc32f8b0f260eed7a1a5e83c385a950dcaa1e4582f7377b6442c23d8cfeb0e67e834529f0a075094f03e559d3f80d3a254008b8e36b44a4beb4e3d68edcc1b90d9bb9c58975ffebe2471d89723062e41a05eba7b035f751c488dca8e4d8bedf940b138e7a1edd190f2e5aa293324fefaf192f377cc088a7aaf3aea755ae1f6ad78921c344aefc2fe12511f662f8c261275be1e45a44e8417fa88bb0aa35f8c0572c356ac222597653849db9c41401b2da1b6d9446c78010e7cba7b9ad98cc3256e1ea928b533c28144ace1fbb3273629e601ac9ddc9f468da57aa2d30c6b75316540bcee2ddb73f8d62969a8c9c90a28136b390cdb1810a6843d41104e7a16d8d8940b53f3eec616d7fb5fc9d54a97dda3bfc7ab3dec88f9ba9d0f79f61a05dc39476181bddbcf2c02a09e7a849f043f1c375d42bfcdc433c0e57c3156e88106c7722aeb7a99de248b0458c9b2e7334f4ab550cb5a4b18296f79bbdfbf45765be5e236c940bfffea77669458d06f72d65fe18864621f19368bd315f0a9b7ff50e490cfff83c8d981950800b0955ccbcba4729218c1840f94869fb44cebdbbb89cd9407b57347bbf176f66ff5f75ad4b3a6d5a0ed04136b651ec87f0fd12dcb9ab335fc6db3f292e6b29d25cf43a066916a5751a719072d7cfa28595f9200edb4967f25141f716da3b120205007c9aad131cd1ca4e3199dc68c6b0c1c5eee722e8ee57483cf354e44bebab418ab41a2ae7a5d5ee9c32502420196f4ed34b4296e77ef60ee91507c2392310573929412a88d89707d81d84cc7df20424e2d142bfeb37e4ff4fb91c6ba96d4ef1d605ac2d7e42a2d9458872554c3b9315f2058f6ff723376433c3922b9df47b5e43a5443410dca3a663cc87644069b4f6433ded76b1aa280826bb2a41964e17045717d5a4351602ef6a3ce14c4dfd270ee7ca0fda58730db3968c04224165f26e7431a1d5be8880f1b14e854047f3174ad81d5442564dfcd42cae5b46e5ab8e1b224c018bd2db6bdc8763e6d42119d0280a13a5def33869bac86dc053fde098e88dbc8135362b4b4d9629389583c6c2ac3bf83cf1d9498694eca8a7ed60067f74d6c6a0c13d56839d0fbd033bb0f2a458d956e6710bd2386141d95b656eee382a8046ade1f60247d4d8de7ee219e451401df17c577e94a77ae48f5d112e138c90c07374c3f69fc7b2b0d0c484af7e7e53d9777239b7bef8e21731e9dfd40237306a9c836aaaf49eeb42fc522ed56eeb1ac0e30208c986f4bf831fbe478e49515d3f3481de39267f540502ff6750ed112c73e027421c58c5ba99081e2afc928ac23c5bff0385ad80c258480f9a1add23ee62cc975f34e2f415fcb14c2cb7b138a451cf4bb9416ed443f61e41c304160b99b6a24110d5dedb631915fcff25a225d97ed7d05f261d59f6d2096608bcf82566a549751e0f77a7a38112e84f04eac52222e843775f345757d5235ef9d9e8f67c86b27f4cf59d1c5edc39eb6f65834f9993e0c0fd1781eca9f2b3b12a07f384324b8e22f748e95488cbeeb8b9f51be951bcb89f8f744f5ef5ab7e6cc5d7ded5527ea7955cb24ee704a505b50f705abf0907f3a15adf8cac951568560af944500b7cac326ae8a10387004abe8c52e5c52543010d8be0618dcddc07ec3b39926e342e82f46c151e26ce0e216ea9d49edfe7321f0ea685bf310a420b5d6b658fa77cc8cccaf727bd12b485ea73ac8e953c6693a701a73cd88858e183158d966ca87ce23e45fc646977fafe2060d8121b1b63b18c467726d7ce469ffa614afd4cb10ca48db129d233d0ef82d72ba86eae679a97461e33a7906858f1075330421c359d40772b9ac45c098305316a43a5680318c9883e52276079a3c1c30d0d8935ac5aad38beb435803bb516b207ae0b9fdb11efccc459229436ebb203833c7fb8c8244af9aa79d8fbe44b9e536bcdcb5653ac191e69d3b235ebf7c1a941660215b39960ee65ad2d17eeee6e70cdc5f8326fd1522a8d286d2f75db657f2cd870a325e316c0598c1f88db725d3a181a4fc6222fa7a246ea0cddd0d69fd2a61e2753f1b85fa458c5647ea1493c2ceb316d9dbf11184b3675ebc5a954b0d818491a7aaffc4a95afca2e31970c779fcaa3d7e7c9e7b0631d7f23e3be7cfcfe87b0c623478e43d9ce63cfeb92674ebe245ddc870fed67a39137d653f5293792714685919dca672ea652159ba565093e340be27bc1866d8b316c09989fffa247f56e5ab001baba0a98133002c393b9bec332afae0f2a317d97e4d28e770ebe7dbbc3a73006805a64ebd3d0c937b8fd9a53882645daeb0d8e700aad3052b96efc4d45b5c2d2d95e996a5e70cf93c830ac19a6e952ae477921eb7c2e19c1e0a1209bd5b97c64ba607421d612c2b841c91e3822f45af5e29cb650cddc7d7e87f0c9fff0f92518a1d73dfff838f4e176db54e11679e75cf9ac01ff38521013b7b29237e476bda83bbe4ab61f16ee4daa9f6f656a2ee09ff3fd5820902bbbff741363db0336461bf869a4d0329e49b2cc9d6ba85c4fa50b79ad517f542301f6d572ab298aec8403d8ba329ab9f4e8077a13ab3e00dbc1f8307168d6e32b9ef487e81fcbcb788af7a3c5b38895d680939d20031f07897514b3460182beeafe48638d1a08c07f60bbb4b8e2a76a17a27efae5ea2529720eca9ec779979263392229bf51cb95a45be31a6238283566b7b458ebd940f2adb8da9c629ceb92beea73558c3db9a2dc95ac5b8038d521fd6aced793a9cea674948e548724cd436b48ad6a444d5ab8dabd7e3fdc462f29c8c0c81cda5c96cb464cd131bf4011b12d24eba21f1cbae42b2d80bde711ae2c5040fe82277f572f16e58ffb654b73244e8ccab229cc47d60e54c3b6b356e43f18062e5cae2c7e2bca5975c39aaf8fdc106f20519e4389d0af415e6a1e0616e3d2c44b32015edd9727ac951c23f1a7867f9e3db8532cf4597a8bbe43c521320414c2aa6b27b3c3a3b34172a806e232ac7994fd8f9ca7b3e52bd103578c156552aa7d659622b278e5478f4e23584a1a7dbe0dccb68c5730abbb0fd931cc6eccad2e099e2b68f45cae1065e250a593a531ce05b7569fe0479aa3af7395a7faaf1b94827d2c134f706950ebc0ddd9181da7b074798c554e6c75d77b15e9b872f89e0da300aa0598d581fdb4a88ccd4c51dc591a7a371928a14c8d192630ca2a9f8280c0ed1b4f38c3a436da74faded38edd461120a0a2c25410ac7b9fef6f872285e606cd94d161ee3c3003375f6c0424c0bd968e1f26ae1c7850e2fa4d0199a7c8d1f1e5fba6805a03b70c3a0a6c1e3e68f4e57bfdc439435354d0e85366da10be75cc48dc27b8972339197fbb9be6b15ebf1337becf03b7f9e9cf3adb4cd715d1f62c609afb4404028b364bb0a90b6a8854a052d8414c3d65694b670855f3030f66c688df62cb570c6db43f4a9aa251f74b2290874b33bfd4390808a8032e297bb161a3d759bfe7d10fb763ba9729b99a1adde60b471c10efca0ca078c08083344a2f6f5f767b78df84a219dd6350045bd72fccc0fcd02d79dde0ce0ac4f582b7940d736510591a4f0567b588ccb5bd5e6cf4157a5809db9f3ae335f432b3f58b4814e9b3497168c9a53bd026133dcb8dcd937112e12c19c8f9af4313a69b2ded8086b3697bbd7963c42214ba8d124bd4edbc9305186164863038c9221c1b4b8fa8f268a37d1c695938e3cb4e9fdafe5f4a3f7f71a86f8fa577fcd033128025ca64ee70e5ea4e2e81525e92d58bdcb42540167dffde8514b443e9a16ab7bfee3c4d9fd254371ee36411ff678bfafc7982ada37edb0c5724d2972bf7056ccca665baf68eb73b0ed77316abb00f8a36daa210aef1407e0da412a2130eefcffc7c6417807308bebf01587e182ff8c3dbfe414116e5fbb6a72633ef5dd3e64c2ffd3365765b34b5587f3edfc031749d6a2750bc4b64124558f3bdff78fd5c837cd151e0ea2029cac8722c8afbc00e0c505ba500c1a13f02b6e73f45bb2488990bdcd830ce3e76aab7ad177ca13b105ff7788607fabecc911d09067deb52dee52d95cc95dbd7e23edb069b60a433a7f6aaf992a0c9930b65d22c15d5d8d33bd5c25fe46618d350d396abbfa9ae5c3c373740e361f20d969407c67f644dab946e32a485162512247f3888ccc07ef30d89f628e322c99d978d7a723835fa52ce650abbef4ff580a694a37a5dec17e793eb1e2a6679f1b45ebaf208c0425086fde7a007d1ce7149ec8482103048eec4b8fa3a85d0046959b555fb246ba3e62185ebc6ea6407caf648c60eb394e72fa86e899d274955f6fda668752cb847e86834a2c6e6d8b16022bdd12c290375623294863c17eb2fc7f56746dab83c382a73818f9085a5d46f2118ba7a966ce15e9987d89e67b307fd8f3a47d8318bf84aab0006e2af0c947a60cf25ab6c0e6e32731f94a28b02c0ab5530ec1a7b407e9599665beb3641a68a7ddd7dce9cd251a5ffe678a1502d78d72bb57ced5ea46fecc203d86424c16a145b88530d6b8ba1780739a7ba079141aa2b2b85e4beb9048aa01028d485d1d58a6c1bb3f6d4aa1c0049f2a8636a052fce6628152349f25abc4af91311e88f55e9d79face9745b1ed42511d99bc547e84c70287299365319ea587b77e976d270d7bd90d43860366a0b711b816549970786a5029febe14bbfde34153a2f03e140e3ae38b43fe84363f7f8f36a7d69f687a3a0a1cb763fcb168351029102a02e6ca2d0b427483237546823365c8dd1c7bcba6bd7bfe1ad85cab544e5b7d6d1cd2a63324493c617104c29be496a2d326c57f88da52719696c876c8ff69b65f36cece1d41ff95e46053b3fa4a6b6b790360348c98093640ee18e752e98f2547981fcb64dd56c2a04db46aafd22fa50eb2cbb28e0eda65d13e876f457ec663c869c6c198d6a078b801f5e373297bb2267269b6996d2ede00caa83ef3b1fb40848d01e031e39bfc1e3f3a1b7f9813153f54982627f6ba77368d9a8ca6994447e20dc6dfa70f061fb66f7d20df7e171a0cc989b0d6e4a0a46709530bddad6263c54988c872c3aa61949cd62a671203365967dd3f441692bbd002a93eaf5df93724f3868d1902523dba688bada3b4c3c17d3a598c55825af4bb3d61d76ed0efd46f1d991b30232e6737595b47323cd83df1f26c327099bb9bf7f5ef8b45d610f5106e4cc7ab65fd2501ddeceb9011633b2512233e2481bf9b19b7f30afc134363b5c65a6256083fa2ad0f04027fd06365a08817e8cf195ae9db6fc25f1ab0304a95d7fa71bf80598126c821bea13eb8ff13e4748c249798482ccfeb4f79d8e82f1640eb0184613a08ab25d5082d5b4c00436c0a749b89b261d6652e063bad1e555155f5ddeebd37812fe0a51b004104f4c1062869926f6d420b46b82731d20b6f671a22308282241dff18c9679af833a90428366f3b0425e", 0x1000}, {&(0x7f0000002200)="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", 0x1000}], 0x6, &(0x7f00000053c0)=[@rights={{0x28, 0x1, 0x1, [r1, r0, 0xffffffffffffffff, r1, r1, r0, r1]}}, @rights={{0x20, 0x1, 0x1, [r1, r0, r0, r1, r1]}}, @rights={{0x34, 0x1, 0x1, [r0, 0xffffffffffffffff, r0, r0, 0xffffffffffffffff, 0xffffffffffffffff, r0, r1, r1, r1]}}, @rights={{0x10, 0x1, 0x1, [r0]}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0xd4, 0x4010}}, {{&(0x7f00000054c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f0000006900)=[@rights={{0x1c, 0x1, 0x1, [r1, r0, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, r0, r1]}}, @cred={{0x18}}], 0x50, 0x20040000}}], 0x4, 0x20004001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0xc00000000000018, &(0x7f0000000380)=@base={0x1e, 0xffffffff, 0x4, 0xfffffc75, 0x0, 0xffffffffffffffff, 0x1e, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x11}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x38, 0x10, 0x401, 0x2000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x13125}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8}}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0xf, &(0x7f0000000480)=ANY=[@ANYBLOB="18004b8feb00"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000000), &(0x7f0000000140)=r5}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000ffffffe500000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) pwritev2(r7, &(0x7f0000001140)=[{&(0x7f00000004c0)='\x00', 0x1}], 0x1, 0x6, 0xde, 0x30) syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, &(0x7f0000000000)='bridge0\x00') 6.292576716s ago: executing program 3 (id=9217): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=@framed={{}, [@snprintf={{}, {}, {0x5}, {0x3, 0x3, 0x3, 0xa, 0x8, 0xfff0, 0xffb0}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0xb6}}]}, &(0x7f0000000080)='syzkaller\x00', 0x8}, 0x94) 5.988294718s ago: executing program 4 (id=9218): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_usb_connect$hid(0x3, 0x3f, 0x0, 0x0) r1 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$vim2m(&(0x7f0000000580), 0x8, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r4, 0xc0cc5640, &(0x7f0000000000)={0x1, @sliced={0x5, [0x9, 0x8, 0x9, 0x2, 0x231, 0xec, 0x2, 0x7ff, 0x3, 0x2, 0xaef6, 0x1ff, 0x3ff, 0x1, 0x9, 0x1, 0x4, 0x9, 0x4, 0xfffb, 0x9, 0x4, 0xfbff, 0x0, 0x401, 0x19f, 0x0, 0x8c, 0x8, 0x6, 0x1, 0x2, 0xea, 0x9, 0xe, 0x3, 0xeaf, 0x4, 0x8, 0x7, 0x3, 0x3, 0x5150, 0xad, 0xb, 0x9, 0x8abc, 0x800], 0x6}}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r5, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000002640)={0x28, r6, 0x311, 0x70bd2b, 0x25dfdbfb, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20}, 0x20000880) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'bridge0\x00'}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000000000006910a40000000000bc001000180000009500000000000000ef4f7c81f5427c16bd2aacf32cdbb47063fd9a7bb1f3ad622c3261f324e081c0ea39bd16d9869302cc08fbd94867708cb208e22cc0ad536525e3b39869285c126353f6a49bc5abc6b9a4eab313655286ee33a56f03b665dd5f1739bda6accc3b9b0d26450d3161263aed01194269a5fba4553bb18fa1f37e2f68a8ef81f090829d0ee04b52611a41642b31a6fe2653171379cc327fc11e38418b589777f8c8ddcbf88df947a05937ea"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0xa6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r7) 5.920840571s ago: executing program 3 (id=9219): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x300, 0x800, 0x2bbba, 0x0, 0x18, 0x0, {}, {0x0, 0xfffffffd, 0xfffffffe}, {0x0, 0xfdff0000}, {0x1000000}, 0x0, 0x3f0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x0, 0x40000000, 0x0, 0x0, 0xffffffdd, 0x2}) 5.635872103s ago: executing program 3 (id=9220): openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = fsopen(&(0x7f00000001c0)='erofs\x00', 0x1) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f0000000280)=':)-$!:\'(-\x00', 0x0, r0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="8c0000000906010200000000000000000200ffff08000940000000390900020073797a310000000005000100070000005c0008801c0007801800018014000240"], 0x8c}, 0x1, 0x0, 0x0, 0x10000182}, 0x4000080) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f00000000c0)={0x1d, r6, 0x20000000000, {0x0, 0xf0}}, 0x18) connect$can_j1939(r5, &(0x7f0000000140)={0x1d, r6, 0xfffffffffffffffd}, 0x18) sendmmsg$inet(r5, &(0x7f0000003b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000010) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r9 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r9, &(0x7f0000000040), 0xc) recvmmsg(r9, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x2, 0x0) ioctl$sock_qrtr_TIOCINQ(r9, 0x8919, 0x0) 4.961053555s ago: executing program 5 (id=9221): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = msgget$private(0x0, 0x0) msgsnd(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="03008000", @ANYRES64=r1], 0x8, 0x800) msgrcv(r1, 0x0, 0x0, 0x2, 0x3800) syz_pidfd_open(0x0, 0x0) pipe2(&(0x7f00000000c0), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r4, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000a80)={{0x12, 0x1, 0x0, 0xa6, 0xdc, 0x34, 0x40, 0x61d, 0xc020, 0xa2bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x93, 0xb2, 0x81, 0x0, [], [{{0x9, 0x5, 0x5, 0x390998da063e1313}}]}}]}}]}}, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x298b40) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001800621060090390000100002"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff0000000002"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000) 4.904761759s ago: executing program 1 (id=9222): socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000002380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000180)='rxrpc_s\x00', &(0x7f0000000300)=@keyring) syz_open_dev$ttys(0xc, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e26, 0x22, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfe}}, 0x82}, 0x1c) io_setup(0x3, 0x0) io_submit(0x0, 0x0, &(0x7f0000004540)) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f00000000c0)={0xf0f041}) syz_emit_ethernet(0x4a, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000280)={0x3, r5, 0x1, 0xffff, 0xa, 0x1ff, 0x1}) r6 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000340)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000440)={r7, 0x0, 0x0, 0x7, 0x0, [], [0x10, 0x0, 0x0, 0x3]}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, 0x0) 2.698129498s ago: executing program 4 (id=9223): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) recvmmsg(r0, &(0x7f0000003840)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x20, 0x0) 2.618419526s ago: executing program 4 (id=9224): r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000040)=0x1c, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r2, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x81}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000004) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000200)={0x5, r0, 'id0\x00'}) r4 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), r3) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000280)={0x0, 0x56, "8faa0c20815e66d175ce48f5b4c35f8a5d396d253cb79fca3c1268570ca5bf5987c65b9fd0b8485b12f7168d46af94e417b6e860dddbd2cbc0980ff27f4b6f63a88abda53eeed20e300be3ab5c2cb9493bdfe1e48330"}, &(0x7f0000000300)=0x5e) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000340)={0x4a, 0x8, 0xb, 0x3, 0x8, 0x3, 0x7fffffff, 0x3, r5}, 0x20) set_mempolicy(0x1, &(0x7f0000000380)=0xf, 0x5c2e) sendmsg$IPSET_CMD_DEL(r3, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xb8, 0xa, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010102}}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xf8}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xd7d}]}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xfffff209}, @IPSET_ATTR_DATA={0x60, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBQUEUE={0x6}, @IPSET_ATTR_MARK={0x8}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x9893}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x2e}, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x2}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x62}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x100000000}, @IPSET_ATTR_COMMENT={0x7, 0x1a, '({\x00'}]}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x40}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x14}, 0x48004) r6 = syz_open_dev$mouse(&(0x7f0000000540), 0x9, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r0, &(0x7f0000000580)={0x2000}) ioctl$EVIOCGVERSION(r6, 0x80044501, &(0x7f00000005c0)=""/236) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000700)={@empty, 0x22, r7}) ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f0000000740)=0x0) syz_pidfd_open(r8, 0x0) ioctl$UI_SET_RELBIT(r6, 0x40045566, 0x5) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000780)=0x1, 0x4) syz_open_dev$char_usb(0xc, 0xb4, 0x7ff) io_uring_register$IORING_REGISTER_PROBE(r6, 0x8, &(0x7f00000007c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}]}, 0x3) syz_clone3(&(0x7f0000000a00)={0x4004000, &(0x7f0000000800), &(0x7f0000000840)=0x0, &(0x7f0000000880), {0x11}, &(0x7f00000008c0)=""/144, 0x90, &(0x7f0000000980), &(0x7f00000009c0)=[r8], 0x1, {r3}}, 0x58) syz_open_procfs(r9, &(0x7f0000000a80)='net/ip_mr_cache\x00') r10 = semget$private(0x0, 0x1, 0x605) semctl$GETALL(r10, 0x0, 0xd, &(0x7f0000000ac0)=""/75) r11 = openat$dlm_plock(0xffffff9c, &(0x7f0000000b40), 0x10000, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000bc0)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000c80)={'tunl0\x00', &(0x7f0000000c00)={'sit0\x00', r7, 0x700, 0x0, 0x7fff, 0x8, {{0x18, 0x4, 0x1, 0x6, 0x60, 0x67, 0x0, 0x2, 0x4, 0x0, @loopback, @private=0xa010102, {[@timestamp={0x44, 0x20, 0x71, 0x0, 0x5, [0x4d7, 0xb3, 0x8, 0x8d7, 0x4, 0x0, 0x4]}, @timestamp_addr={0x44, 0x24, 0xbd, 0x1, 0x3, [{@remote, 0x45}, {@remote, 0x500000}, {@local, 0x6}, {@multicast1, 0xd}]}, @generic={0x82, 0x5, "3bde64"}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000cc0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r11, &(0x7f0000001180)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001140)={&(0x7f0000000d00)={0x420, r4, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8, 0x1, r12}, {0x7c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}]}}, {{0x8, 0x1, r13}, {0x184, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0xb, 0x1, 0x5, 0xf}, {0x3, 0x40, 0x4, 0x21}, {0x0, 0x6, 0x81, 0x7}, {0x8, 0x75, 0xd, 0x1}, {0x1, 0x5, 0xf5, 0xff49}, {0x9, 0x4, 0x4, 0x6}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x9, 0x4, 0x9b, 0x5}, {0x1, 0x4, 0x7, 0x591c}, {0x8, 0xbd, 0xfd, 0x3}, {0x88, 0x2, 0x6, 0x1fc4}, {0xe3d4, 0x10, 0x4d, 0x5}, {0x7, 0x49, 0x5, 0xd60c}, {0xfffd, 0x3, 0x5, 0x2908}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}]}}, {{0x8, 0x1, r14}, {0x1f4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xf}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x6, 0x40, 0x0, 0x9}, {0x63d8, 0x9, 0x0, 0xc}]}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfffff9e5}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}]}, 0x420}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004000) 2.412425971s ago: executing program 4 (id=9225): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x14, &(0x7f00000001c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x54}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x14, r4}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x10000000}}}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) sendmsg(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) lseek(0xffffffffffffffff, 0x9, 0x0) write$6lowpan_control(0xffffffffffffffff, 0x0, 0x0) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r5, &(0x7f0000000840)={0x20f, 0x2, 0x0, {{0x51f, 0xce, 0x0, 0x0, {}, 0x2810000, 0x8, 0x1, 0x0, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, 'pg>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x83\x00\xb5\x00\x00+YN\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1\x00\x00\x00\x00\x00\x00\x00\x00', 0x2, '\x00\x00\x9f\xd2\x8f43\xb6\x02\"K\xdd_MR\xb8=a\xcb\v!\x89A\x16\x95\xef\xe2\xefH\xb2\x11\x1d\x1c6\x04\x82\xe6\xc7\x8e\x1e{\xb8\x8e7\x9d*\xec\xff\xfe\xc3\xa1\x9e^\x17<\x8b\x04\xcfr\f\xa4+\xfd3\x8c\xb7\x0f\xdaP+\x89/\xb0\xdd\x83{\x9e\xc6S\x05\x0f\r|\xdcE\x99\x7f\xa6w;\xbf\xe1\xbdp\xee\x03\xe4\xaf\xb4\x99\xa2\x9b\xd3\xde\xce/F@\xf8V\x02\x1c\xde\xe9\xdcoR\x1e{\xc0jv\xa9\x1eg\xba\x8d\xf3\xcc%:\xbcY\x1a\x15\a\x7f\x89\x92\xeaWv\x80\xff\xec\x87\xa9\x06\xd0(\x8am\xbf2\xa2$\x01T6{\x1e\x05v\x1a;\xac\xde\xab\xba\x82\xb3\xccLFl\xe0\x0e&\x81\xb2\xffk\x94\"\xd8\x01\b\n\x96\xc8\xc8r\xa6\xad\xd7\xd7 D3\x82\xaea\xb3U89\xde#4]\v\xdd\xcc\t\x878\x97\x03\xf81\xa0\x948\x91\xf0\xfa\x9eo\x9b\xb5w\x86\xd9R\xc2\x9a\x8c\xbd\xb8M\xd5\xed~\xd8\xab\xf6\x0f\xacKC\x1b\xbfo\x0e\xc9\x006\xf5\xe4', 0x2f19639a8414712, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8r\x9aE\x1b4\a\xdb\xda\xb2\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00\x13\x12D\xf7s=\xa4*&%\x00\x00\x00_\ro \xe5\xfd\xac\xfb\xa5l\xf3\xe7\xa3\xc0\x14\x19N\x13\xa4\x92G\x7f\x92\'\xe4{\x1a^,)\xee\xec\x05}d\xc2\xb5\x9e\\\xa6\a\x1e\x06l\xa4\x86,\xff\b\x9f\xd5\x9fo\xb8\x8cLi\x14\xd0\x9a\xf7\xf6'}, 0xfffffed4, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300, 0x0, 0x0, 0xee01}}, 0x20f) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000000)=0xffff0018) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f00000005c0)={&(0x7f0000000240), 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0x44, 0x0, 0x4, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x4}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x3ff}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x8000}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x6}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x100}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4000050) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000080)={0x81, 0x0, 0x3}) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f00000008c0)={"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"}) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @ioapic={0x40000, 0x2, 0x9, 0xffffffff, 0x0, [{0x81, 0xb, 0x3, '\x00', 0xff}, {0x6, 0x3, 0x5, '\x00', 0xcf}, {0x1, 0x2, 0x91, '\x00', 0x6}, {0x4, 0xfd, 0x8, '\x00', 0x97}, {0x9, 0x8b, 0x80, '\x00', 0x8}, {0xfa, 0x9, 0xf, '\x00', 0x6}, {0x7, 0x5, 0x4, '\x00', 0xcf}, {0x7, 0xd, 0xf, '\x00', 0x1}, {0x98, 0x0, 0x4, '\x00', 0xff}, {0x1, 0x1, 0x0, '\x00', 0x9}, {0xd, 0xfd, 0x8f, '\x00', 0x9}, {0x2, 0x5, 0x10, '\x00', 0x5}, {0xf, 0x6, 0x42, '\x00', 0x7f}, {0x9, 0x1, 0x8, '\x00', 0x8}, {0x81, 0x10, 0x4, '\x00', 0x3d}, {0x1, 0xe, 0x2, '\x00', 0x20}, {0x0, 0xc, 0x22, '\x00', 0x5}, {0x20, 0x40, 0x8, '\x00', 0xfc}, {0xb, 0x2, 0x8, '\x00', 0x4}, {0x81, 0x5, 0x9, '\x00', 0x8}, {0x9, 0x2, 0x5, '\x00', 0xa}, {0x9, 0xfc, 0x90, '\x00', 0x21}, {0x4, 0xeb, 0xc0}, {0x6, 0x5, 0x0, '\x00', 0xb}]}}) write(r0, &(0x7f00000000c0)="1c0000001d005f0214fffffffffffff8070000000d00000000000600", 0x1c) 2.356030573s ago: executing program 3 (id=9226): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sysvipc/sem\x00', 0x0, 0x0) pread64(r3, 0x0, 0x0, 0xf27b) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00'], 0x5c}}, 0x0) r6 = syz_open_dev$radio(&(0x7f0000000280), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r6, 0x40305652, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x80, 0xfa000, 0x8}) socket$nl_netfilter(0x10, 0x3, 0xc) pread64(0xffffffffffffffff, &(0x7f0000001c00)=""/4108, 0x100c, 0x3) ioctl$BLKDISCARDZEROES(0xffffffffffffffff, 0x127c, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa0000000003"], 0x1c) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="6002000043000701fefffffffcdbdf25037c00"], 0x260}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) 1.721470369s ago: executing program 2 (id=9168): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) r2 = syz_open_dev$vbi(&(0x7f0000000f40), 0x0, 0x2) ioctl$VIDIOC_DQBUF(r2, 0xc044560f, &(0x7f0000000fc0)=@multiplanar_userptr={0x600000, 0x5, 0x4, 0x400, 0x0, {0x0, 0xea60}, {0x5, 0x0, 0x7, 0x4, 0x17, 0x7, "d7efaaae"}, 0x400, 0x2, {0x0}, 0x2}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x8000800000000003}, 0x18) r3 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x23}) io_uring_enter(r3, 0x100048ed, 0x0, 0x2, 0x0, 0x0) 1.446350847s ago: executing program 1 (id=9227): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c000480280001800e000100636f6e6e6c696d6974000000140002800800024008140001080001400000000e0900010073797a30000000000900020073797a32"], 0x80}}, 0x0) 1.417102308s ago: executing program 4 (id=9228): syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000ec0)=@mangle={'mangle\x00', 0x64, 0x6, 0x64c, 0x220, 0x4f8, 0x2e8, 0x4f8, 0x430, 0x62c, 0x62c, 0x62c, 0x62c, 0x62c, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, [0x0, 0xddd531f94ea801e4, 0x0, 0xff], [0xffffff00, 0x1fffffffe, 0xff000000, 0xffffffff], 'batadv_slave_1\x00', 'ip6tnl0\x00', {}, {}, 0x2f, 0x89, 0x6, 0x12}, 0x0, 0xa4, 0x1cc}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x4, 'system_u:object_r:dhcp_state_t:s0\x00'}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@local, @loopback, [0x0, 0xff, 0xff000000], [0xffffff00, 0xff, 0xffffff00, 0xff], 'veth0_to_team\x00', 'veth0_to_hsr\x00', {0xff}, {0xff}, 0x0, 0x0, 0x1, 0x4}, 0x0, 0x104, 0x148, 0x0, {}, [@common=@unspec=@limit={{0x3c}, {0x7, 0x6, 0x6, 0x64e8, 0x400, 0x6, 0x8}}, @inet=@rpfilter={{0x24}, {0x4}}]}, @SNPT={0x44, 'SNPT\x00', 0x0, {@ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1f, 0x38}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @inet=@DSCP={0x24}}, {{@uncond, 0x0, 0xa4, 0xe0}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x3, 0x0, @ipv4=@empty, 0x4e24}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x6a8) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_int(r2, 0x6, 0x3, &(0x7f0000002000), &(0x7f0000002040)=0x4) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000002c0)={0x0, 0x0, 0xfa00, {0x3, &(0x7f0000001180)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000680)={0x15, 0x110, 0xfa08, {r4, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x4e23, @empty}, @in={0x2, 0x8, @local}}}, 0x118) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0xefff, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x58, 0xc, 0xa, 0x101, 0x0, 0xefffffff, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2c, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2df31ab3}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r7, 0x402c542c, &(0x7f0000000340)={0x80000001, 0x200ffffe, 0x8, 0x0, 0x0, "4d6b5ccb00", 0xffffffff}) ioctl$TCXONC(r7, 0x540a, 0x2) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x28, r6, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x4}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfc}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x64}]}, 0x28}, 0x1, 0x0, 0x0, 0x4044851}, 0x0) 1.287817297s ago: executing program 1 (id=9229): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1400000010000700000e0000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000010900010073797a30000000000800054000000002600000000c0a01080000000000000000010000000900020073797a32000000003400038030000080080003400000000224000b80200001800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30"], 0xe4}, 0x1, 0x0, 0x0, 0x81}, 0x4) 1.195584148s ago: executing program 2 (id=9230): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x138, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x6, 0x0, 0x0, 0xa, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0x0, 0x0, 0x0, 0x2dd}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2}, [@tmpl={0x84, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x3b}, 0x4d2, 0x2b}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x0, 0x0, 0x0, 0xff}, {{@in6=@private2, 0x0, 0x32}, 0x30, @in=@local, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}]}]}, 0x138}, 0x1, 0x0, 0x80ff}, 0x0) 1.042841437s ago: executing program 1 (id=9231): r0 = add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, &(0x7f0000000000)="100c0608262300ba8b0ad775b31b", 0xe, 0xfffffffffffffffc) keyctl$unlink(0x9, r0, 0xfffffffffffffffe) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000001280)=ANY=[@ANYBLOB="12010000000000400400000000000000000109022400010000d00009329cfae553e2addb28788c2c53040004010300000009210100f901220500e52d799ef995527ef5"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040bd28050900000000000109022400010000000009040200010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000180)={0x18, &(0x7f0000000240)=ANY=[@ANYBLOB="00017c", @ANYBLOB="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", @ANYRES32=r0, @ANYRESOCT=r2], 0x0, 0x0, 0x0, 0x0}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x26000, 0x0) open(0x0, 0x8001, 0x104) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x60602, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_open_dev$audion(0x0, 0x1ff, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x80000000, 0x400) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x109002) syz_open_procfs(0x0, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x8000, 0x44, 0x18}, 0x18) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8923, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f000000a840), 0x0, 0x2, 0x0) syz_usb_control_io(r1, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0) rseq(&(0x7f0000000040), 0xfffffffffffffdb2, 0x0, 0x0) rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) sync() openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) 998.479752ms ago: executing program 4 (id=9232): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xf8, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0xfffffffffffffffd, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x1}, {0x0, 0x4000000000000000, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x2, 0x2b}, 0xa, @in6=@local, 0x0, 0x4}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) pipe(0x0) bind$inet(r2, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) ioctl$VIDIOC_G_PARM(0xffffffffffffffff, 0xc0cc5615, &(0x7f0000000ec0)={0xe, @output={0x1000, 0x1, {0x3ff, 0x800}, 0x2, 0xcb}}) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) syz_usb_connect(0x4, 0x0, 0x0, 0x0) 921.707155ms ago: executing program 2 (id=9233): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x8000000000000003}, 0x18) r2 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) statfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)=""/180) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)={0xa0000004}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f0000000340), 0x11000) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000a40), 0x1, 0x101400) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r8, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000a80)="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", 0x1000, 0x0}) r10 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r10, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg_v2(r10, &(0x7f0000000180)={0x2, 0x0, {&(0x7f00000003c0)=""/140, 0xffffffffffffff56, &(0x7f0000000140)=""/59, 0x2, 0x2}}, 0x48) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r8, 0xc01064ac, &(0x7f0000000000)={r9, 0x1000, &(0x7f0000002a80)=""/4096}) close(0xffffffffffffffff) unshare(0x2c020400) r11 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r11, 0x11, 0x66, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000000)={0xa0000001}) 873.981538ms ago: executing program 3 (id=9234): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) recvmmsg(r0, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002780)}, 0x1}], 0x1, 0x20, 0x0) 328.675881ms ago: executing program 3 (id=9235): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f00000000c0)=0x58, 0x5) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000080)={0x8f, 0x0, 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000020c0)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) r6 = openat$tun(0xffffff9c, &(0x7f0000000000), 0x8a840, 0x0) ioctl$TUNSETDEBUG(r6, 0x400454c9, &(0x7f0000000040)=0x3) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)={0x30, r5, 0xdac7a804b810efff, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x14}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}]}]}, 0x30}}, 0x40000010) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000680)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x4e23, @empty}, @in={0x2, 0x8, @local}}}, 0x118) 281.672311ms ago: executing program 5 (id=9236): socket$nl_generic(0x11, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) socket$inet(0x2, 0x3, 0x33) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x1, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x6) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x22402) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000000c00)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546000677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5467a932b77674e802a0d42bc6099ad238af770b5ed8925161729298700000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809b5b9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed3957f813567f7a95435ac15fc0288d9b2a169cdcacc413b48dafb7a2c8cb482bac0ac559eaf39027ceb379a902d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bff57002c1097f92e91002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff7a1ef3282830689da6b53b263339863297771429d120000003341bf4abacac94500fca0493cf29b33dcc9ffffffffffffffd39f6ce0c6ff01589646efd1cf870cd7bb2366fdf870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1293b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd000c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301fb997316dbf17866fb84d4173731efe895ff2e1c55ef08235a0126e01254c44060926e90109b598502d3e959efc71f665c4d75cf2458e3542c9062ece84c99a861887a20639b41c8096d5742db41bd61080dcbe40e0f802fc12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc74aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7ad333545794f37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea139376f24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8e3070000001e48418046c216c1f895778cb25122a2a998de0842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec84ac3571f02f647b3385b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba2f58ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df986741517abf11389b751f4e109b60000000000000000d6d5210d7560eb92d6a97a27602b81f76386f1531497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750890ae71555b3228b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288d139bd3da230ed05a8fe64680b0a3f9f2dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30235b9100000000a55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c776f4b4ce07e1c6fa66fcfc7a228805f76785efc0ceb1c8e5729c66418d169fc03aa18854693ad2a182068e1e3a0e2505bc7f41019645466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7e478950aa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1ea"], 0x0}, 0x94) socket$alg(0x26, 0x5, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a00010000"], 0x64}, 0x1, 0x0, 0x2000}, 0x0) 0s ago: executing program 5 (id=9237): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) io_uring_setup(0x1148, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010000108000000080000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b000000000008000a00", @ANYRES32=0x0, @ANYBLOB="a4c10805a23306bc8b93af773cc26a9b790839fef4a2ce4a853e6f108f907138dfc3"], 0x3c}}, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000040)=0xce, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r3, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}, 0x2000000}], 0x300, 0xf00) connect$inet(0xffffffffffffffff, 0x0, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) epoll_create1(0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, &(0x7f00000000c0)={0x3}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) kernel console output (not intermixed with test programs): s an invalid interface number: 230 but max is 0 [ 2354.802416][ T5924] usb 6-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 2354.824706][ T5924] usb 6-1: config 135 has no interface number 0 [ 2354.840045][ T5924] usb 6-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 2354.868448][ T5924] usb 6-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 2354.884607][ T5924] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2354.895571][ T5924] usb 6-1: Product: syz [ 2354.900480][ T5924] usb 6-1: Manufacturer: syz [ 2354.905261][ T5924] usb 6-1: SerialNumber: syz [ 2354.917544][ T5924] uvcvideo 6-1:135.230: Found Unit with invalid ID 0 [ 2354.934168][T14340] usb 3-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x44, changing to 0x4 [ 2354.957169][T14340] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 2354.978941][ T5924] uvcvideo 6-1:135.230: Found UVC 0.00 device syz (18ec:3288) [ 2354.995575][T14340] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x4 has invalid maxpacket 16706, setting to 64 [ 2355.016149][ T5924] uvcvideo 6-1:135.230: No valid video chain found. [ 2355.030698][T14340] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2355.054901][T14340] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2355.067105][T14340] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2355.083461][T14340] usb 3-1: Product: syz [ 2355.087747][T14340] usb 3-1: Manufacturer: syz [ 2355.094537][T14340] usb 3-1: SerialNumber: syz [ 2355.139104][T14340] usb 3-1: config 0 descriptor?? [ 2355.162897][T22063] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 2355.177025][T14340] usb 3-1: selecting invalid altsetting 0 [ 2355.687531][T14340] usb 2-1: USB disconnect, device number 31 [ 2355.781768][T22011] syz.5.8818 (22011): drop_caches: 2 [ 2355.915766][ T593] usb 6-1: USB disconnect, device number 27 [ 2356.135970][T22121] pim6reg: entered allmulticast mode [ 2356.150076][T29856] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 2356.423036][T29856] usb 4-1: Using ep0 maxpacket: 8 [ 2356.581241][T29856] usb 4-1: config 1 has an invalid descriptor of length 23, skipping remainder of the config [ 2356.596243][T29856] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 2356.610946][T29856] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2356.709677][T14340] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 2356.850294][T29856] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 2356.866879][T29856] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2356.894604][T14340] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 2356.903171][T14340] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 2356.912783][T29856] usb 4-1: Product: syz [ 2357.042764][T29856] usb 4-1: Manufacturer: syz [ 2357.073475][T29856] usb 4-1: SerialNumber: syz [ 2357.078285][T14340] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 2357.121318][T14340] usb 2-1: config 220 has no interface number 2 [ 2357.134970][T14340] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 2357.177241][T29856] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 2357.203258][T14340] usb 2-1: config 220 interface 0 has no altsetting 0 [ 2357.214008][T29856] usbtest 4-1:1.0: couldn't get endpoints, -22 [ 2357.261989][T14340] usb 2-1: config 220 interface 76 has no altsetting 0 [ 2357.268981][T29856] usbtest 4-1:1.0: probe with driver usbtest failed with error -22 [ 2357.279292][T14340] usb 2-1: config 220 interface 1 has no altsetting 0 [ 2357.318788][T14340] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 2357.330360][T14340] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2357.343926][T14340] usb 2-1: Product: syz [ 2357.352975][T14340] usb 2-1: Manufacturer: syz [ 2357.363129][T14340] usb 2-1: SerialNumber: syz [ 2357.387534][ T129] usb 3-1: USB disconnect, device number 106 [ 2357.710385][T29856] usb 4-1: USB disconnect, device number 125 [ 2358.499992][ T593] usb 3-1: new full-speed USB device number 107 using dummy_hcd [ 2358.665418][ T593] usb 3-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x44, changing to 0x4 [ 2358.679614][ T593] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 2358.740697][ T593] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x4 has invalid maxpacket 16706, setting to 64 [ 2358.770700][ T593] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2358.807904][ T593] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2358.907889][ T593] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2358.982134][T14340] usb 2-1: selecting invalid altsetting 0 [ 2359.023789][ T593] usb 3-1: Product: syz [ 2359.036774][T14340] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 2359.065585][ T593] usb 3-1: Manufacturer: syz [ 2359.160138][T14340] uvcvideo 2-1:220.0: No valid video chain found. [ 2359.170667][ T593] usb 3-1: SerialNumber: syz [ 2359.224535][ T593] usb 3-1: config 0 descriptor?? [ 2359.242654][T14340] usb 2-1: selecting invalid altsetting 0 [ 2359.248552][T14340] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 2359.259548][T22166] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2359.293568][ T593] usb 3-1: selecting invalid altsetting 0 [ 2359.343076][T14340] usb 2-1: USB disconnect, device number 32 [ 2359.609464][T22205] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8831'. [ 2360.157322][ T5833] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2360.170507][ T5833] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2360.178614][ T5833] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2360.191485][ T5833] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2360.199278][ T5833] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2360.268187][T22228] 8021q: VLANs not supported on team0 [ 2361.108269][ T5924] usb 3-1: USB disconnect, device number 107 [ 2361.562128][ T5924] usb 6-1: new full-speed USB device number 28 using dummy_hcd [ 2361.695845][T19368] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2361.740679][ T5924] usb 6-1: device descriptor read/64, error -71 [ 2361.798223][T22224] chnl_net:caif_netlink_parms(): no params data found [ 2361.902063][T19368] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2362.020169][ T5924] usb 6-1: new full-speed USB device number 29 using dummy_hcd [ 2362.213635][T19368] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2362.224589][ T5924] usb 6-1: device descriptor read/64, error -71 [ 2362.240421][T22384] netlink: 44 bytes leftover after parsing attributes in process `syz.2.8842'. [ 2362.258625][T22384] netlink: 44 bytes leftover after parsing attributes in process `syz.2.8842'. [ 2362.267970][ T5833] Bluetooth: hci4: command tx timeout [ 2362.351251][ T5924] usb usb6-port1: attempt power cycle [ 2362.498554][T19368] bond0: (slave netdevsim0): Releasing backup interface [ 2362.560809][T19368] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2362.840370][ T5924] usb 6-1: new full-speed USB device number 30 using dummy_hcd [ 2362.883634][ T5924] usb 6-1: device descriptor read/8, error -71 [ 2363.026630][T22224] bridge0: port 1(bridge_slave_0) entered blocking state [ 2363.035109][T22224] bridge0: port 1(bridge_slave_0) entered disabled state [ 2363.064583][T22224] bridge_slave_0: entered allmulticast mode [ 2363.115066][T22224] bridge_slave_0: entered promiscuous mode [ 2363.144529][ T5924] usb 6-1: new full-speed USB device number 31 using dummy_hcd [ 2363.167874][T22224] bridge0: port 2(bridge_slave_1) entered blocking state [ 2363.206996][ T5924] usb 6-1: device descriptor read/8, error -71 [ 2363.220040][T22224] bridge0: port 2(bridge_slave_1) entered disabled state [ 2363.242403][T22224] bridge_slave_1: entered allmulticast mode [ 2363.267637][T22224] bridge_slave_1: entered promiscuous mode [ 2363.340905][ T5924] usb usb6-port1: unable to enumerate USB device [ 2363.706996][T22224] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2363.744154][T22224] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2364.178187][T22224] team0: Port device team_slave_0 added [ 2364.310762][T22224] team0: Port device team_slave_1 added [ 2364.339622][ T5833] Bluetooth: hci4: command tx timeout [ 2364.500365][T22515] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8845'. [ 2364.563753][T22515] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8845'. [ 2364.646799][T22515] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8845'. [ 2364.690097][T22224] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2364.711404][T22224] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2364.842639][T22224] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2364.914393][T22224] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2365.033874][T22224] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2365.096803][T22224] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2365.206788][T22541] loop5: detected capacity change from 0 to 7 [ 2365.235868][T22541] Dev loop5: unable to read RDB block 7 [ 2365.614469][T22541] loop5: AHDI p1 p2 p3 [ 2365.677139][T22541] loop5: partition table partially beyond EOD, truncated [ 2365.754241][T22541] loop5: p1 start 50331648 is beyond EOD, truncated [ 2365.838086][T22541] loop5: p2 size 1701016946 extends beyond EOD, truncated [ 2366.271715][T29856] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 2366.428278][ T5833] Bluetooth: hci4: command tx timeout [ 2366.465916][T29856] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 2366.485952][T29856] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2366.527944][T29856] usb 3-1: Product: syz [ 2366.547215][T29856] usb 3-1: Manufacturer: syz [ 2366.565618][T29856] usb 3-1: SerialNumber: syz [ 2366.607552][T29856] hub 3-1:24.0: bad descriptor, ignoring hub [ 2366.619972][T29856] hub 3-1:24.0: probe with driver hub failed with error -5 [ 2366.756241][T19368] bond0 (unregistering): Released all slaves [ 2366.795713][T19368] bond1 (unregistering): Released all slaves [ 2366.948803][T29856] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 2366.983058][T29856] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 2367.003372][T29856] dib0700: firmware download failed at 7 with -22 [ 2367.041781][T29856] usb 3-1: USB disconnect, device number 108 [ 2367.097078][T19368] bond2 (unregistering): Released all slaves [ 2367.741539][T19368] bond3 (unregistering): Released all slaves [ 2368.156081][T19368] bond4 (unregistering): Released all slaves [ 2368.500079][ T5833] Bluetooth: hci4: command tx timeout [ 2368.544277][T19368] bond5 (unregistering): Released all slaves [ 2368.857010][T19368] bond6 (unregistering): Released all slaves [ 2368.905946][T22552] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8850'. [ 2369.342887][T22612] FAULT_INJECTION: forcing a failure. [ 2369.342887][T22612] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2369.380732][T22609] netlink: 56 bytes leftover after parsing attributes in process `syz.5.8856'. [ 2369.475890][T22612] CPU: 1 UID: 0 PID: 22612 Comm: syz.2.8855 Tainted: G L syzkaller #0 PREEMPT(full) [ 2369.475925][T22612] Tainted: [L]=SOFTLOCKUP [ 2369.475934][T22612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2369.475948][T22612] Call Trace: [ 2369.475956][T22612] [ 2369.475966][T22612] dump_stack_lvl+0xe8/0x150 [ 2369.476001][T22612] should_fail_ex+0x414/0x560 [ 2369.476041][T22612] copy_folio_from_iter_atomic+0x30b/0x1910 [ 2369.476091][T22612] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 2369.476127][T22612] ? shmem_write_begin+0x1d8/0x330 [ 2369.476165][T22612] generic_perform_write+0x5df/0x900 [ 2369.476201][T22612] ? __pfx_generic_perform_write+0x10/0x10 [ 2369.476220][T22612] ? down_write+0x162/0x1f0 [ 2369.476249][T22612] ? file_update_time_flags+0x2cb/0x4e0 [ 2369.476280][T22612] shmem_file_write_iter+0xf8/0x120 [ 2369.476309][T22612] vfs_write+0x5c9/0xb30 [ 2369.476331][T22612] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 2369.476360][T22612] ? __pfx_vfs_write+0x10/0x10 [ 2369.476401][T22612] ? __fget_files+0x2a/0x420 [ 2369.476431][T22612] ksys_write+0x145/0x250 [ 2369.476449][T22612] ? __pfx_ksys_write+0x10/0x10 [ 2369.476475][T22612] __do_fast_syscall_32+0x1dc/0x560 [ 2369.476509][T22612] ? lockdep_hardirqs_on+0x7b/0x110 [ 2369.476523][T22612] ? do_fast_syscall_32+0x34/0x80 [ 2369.476539][T22612] ? irqentry_exit+0x10f/0x660 [ 2369.476557][T22612] do_fast_syscall_32+0x34/0x80 [ 2369.476575][T22612] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2369.476593][T22612] RIP: 0023:0xf7f13539 [ 2369.476612][T22612] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2369.476626][T22612] RSP: 002b:00000000f53e555c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 2369.476642][T22612] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000000 [ 2369.476653][T22612] RDX: 000000000208e24b RSI: 0000000000000000 RDI: 0000000000000000 [ 2369.476662][T22612] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2369.476671][T22612] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2369.476680][T22612] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2369.476702][T22612] [ 2369.560606][T22224] hsr_slave_0: entered promiscuous mode [ 2369.561930][T22224] hsr_slave_1: entered promiscuous mode [ 2369.563400][T22224] debugfs: 'hsr0' already exists in 'hsr' [ 2369.563423][T22224] Cannot create hsr debugfs directory [ 2370.301427][T22680] team0: Caught tx_queue_len zero misconfig [ 2370.463415][T22680] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8859'. [ 2370.603480][T19368] hsr_slave_0: left promiscuous mode [ 2370.624193][T19368] hsr_slave_1: left promiscuous mode [ 2370.691222][T19368] veth1_macvtap: left promiscuous mode [ 2370.705870][T19368] veth0_macvtap: left allmulticast mode [ 2370.738708][T19368] veth0_macvtap: left promiscuous mode [ 2371.020451][T19368] pim6reg (unregistering): left allmulticast mode [ 2371.536855][T22706] syz.3.8862 (22706): drop_caches: 2 [ 2371.668921][T22708] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.8863'. [ 2371.699427][T22708] openvswitch: netlink: Missing key (keys=40, expected=100) [ 2371.844215][T19368] macvtap0 (unregistering): left allmulticast mode [ 2371.979892][T29856] usb 4-1: new full-speed USB device number 126 using dummy_hcd [ 2372.161779][T29856] usb 4-1: config 135 has an invalid interface number: 230 but max is 0 [ 2372.172916][T29856] usb 4-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 2372.218752][T29856] usb 4-1: config 135 has no interface number 0 [ 2372.233549][T29856] usb 4-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 2372.272627][T22716] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8864'. [ 2372.293810][T29856] usb 4-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 2372.307939][T29856] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2372.326857][T29856] usb 4-1: Product: syz [ 2372.332737][T29856] usb 4-1: Manufacturer: syz [ 2372.347531][T29856] usb 4-1: SerialNumber: syz [ 2372.357705][T22716] netlink: 44 bytes leftover after parsing attributes in process `syz.2.8864'. [ 2372.392624][T22716] netlink: 44 bytes leftover after parsing attributes in process `syz.2.8864'. [ 2372.417186][T29856] uvcvideo 4-1:135.230: Found Unit with invalid ID 0 [ 2372.441878][T29856] uvcvideo 4-1:135.230: Found UVC 0.00 device syz (18ec:3288) [ 2372.453454][T29856] uvcvideo 4-1:135.230: No valid video chain found. [ 2373.698932][T22726] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8866'. [ 2373.730723][T22726] netlink: 44 bytes leftover after parsing attributes in process `syz.2.8866'. [ 2373.751921][T22726] netlink: 44 bytes leftover after parsing attributes in process `syz.2.8866'. [ 2374.088636][ T129] usb 4-1: USB disconnect, device number 126 [ 2374.130559][T14137] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 2374.314802][T14137] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2374.347142][T14137] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 2374.376755][T14137] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2374.412209][T14137] usb 3-1: config 0 descriptor?? [ 2375.331384][ T129] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 2375.524417][ T129] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 2375.535992][ T129] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2375.631182][ T129] usb 6-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=a2.bf [ 2375.640402][ T129] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2375.665482][ T129] usb 6-1: Product: syz [ 2375.678710][ T129] usb 6-1: Manufacturer: syz [ 2375.692294][ T129] usb 6-1: SerialNumber: syz [ 2375.753222][T22224] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2375.767074][ T129] usb 6-1: config 0 descriptor?? [ 2375.791630][ T129] ssu100 6-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 2375.806784][T22224] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2375.837464][T22224] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2375.872216][T22224] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2375.990544][T14340] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 2376.006277][T22777] netlink: 'syz.5.8868': attribute type 2 has an invalid length. [ 2376.058514][T22784] netlink: 'syz.5.8868': attribute type 2 has an invalid length. [ 2376.170279][ T129] ssu100 6-1:0.0: probe with driver ssu100 failed with error -110 [ 2376.234148][T22777] !: entered promiscuous mode [ 2376.239640][T22784] !: left promiscuous mode [ 2376.286554][T14340] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 2376.349977][T14340] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2376.440320][T14340] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=a2.bf [ 2376.464054][T14340] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2376.513317][T14340] usb 4-1: Product: syz [ 2376.526832][T14340] usb 4-1: Manufacturer: syz [ 2376.543549][T14340] usb 4-1: SerialNumber: syz [ 2376.661462][T14340] usb 4-1: config 0 descriptor?? [ 2376.671899][T14340] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 2376.733352][T22224] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2376.885655][T22816] netlink: 'syz.3.8872': attribute type 2 has an invalid length. [ 2376.943142][T22816] !: entered promiscuous mode [ 2376.963321][T29856] usb 3-1: USB disconnect, device number 109 [ 2377.017002][T22816] netlink: 'syz.3.8872': attribute type 2 has an invalid length. [ 2377.036687][T22224] 8021q: adding VLAN 0 to HW filter on device team0 [ 2377.057562][T14340] ssu100 4-1:0.0: probe with driver ssu100 failed with error -110 [ 2377.122937][T22816] !: left promiscuous mode [ 2377.415641][T27860] bridge0: port 1(bridge_slave_0) entered blocking state [ 2377.422812][T27860] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2377.709325][ T129] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 2377.722787][T12607] bridge0: port 2(bridge_slave_1) entered blocking state [ 2377.730009][T12607] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2377.972224][ T129] usb 3-1: config 0 has an invalid interface number: 3 but max is 0 [ 2377.981079][ T129] usb 3-1: config 0 has no interface number 0 [ 2377.993100][ T129] usb 3-1: New USB device found, idVendor=1660, idProduct=1921, bcdDevice=1f.84 [ 2378.107993][T22857] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8874'. [ 2378.162887][ T129] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2378.171042][ T129] usb 3-1: Product: syz [ 2378.175226][ T129] usb 3-1: Manufacturer: syz [ 2378.189320][ T129] usb 3-1: SerialNumber: syz [ 2378.246790][ T129] usb 3-1: config 0 descriptor?? [ 2378.258542][ T39] usb 6-1: USB disconnect, device number 32 [ 2378.403221][T22869] netlink: 'syz.5.8875': attribute type 1 has an invalid length. [ 2378.422030][T22224] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2378.534070][ T129] dvb-usb: found a 'Medion CTX1921 DVB-T USB' in warm state. [ 2378.654715][ T129] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2378.729316][T14137] usb 4-1: USB disconnect, device number 127 [ 2378.734968][T22869] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2378.743083][T22847] fuse: Bad value for 'fd' [ 2378.940297][T22880] bond1: (slave geneve2): making interface the new active one [ 2378.948378][ T129] dvbdev: DVB: registering new adapter (Medion CTX1921 DVB-T USB) [ 2378.987480][ T129] usb 3-1: media controller created [ 2379.013607][ T129] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2379.025112][T22880] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 2379.102124][ T129] DVB: Unable to find symbol dib7000p_attach() [ 2379.108537][ T129] dvb-usb: no frontend was attached by 'Medion CTX1921 DVB-T USB' [ 2379.266884][T22224] veth0_vlan: entered promiscuous mode [ 2379.309633][T14137] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 2379.332420][T22224] veth1_vlan: entered promiscuous mode [ 2379.400041][ T129] rc_core: IR keymap rc-dib0700-rc5 not found [ 2379.419009][ T129] Registered IR keymap rc-empty [ 2379.447541][ T129] dvb-usb: could not initialize remote control. [ 2379.454045][T14137] usb 4-1: device descriptor read/64, error -71 [ 2379.468768][ T129] dvb-usb: Medion CTX1921 DVB-T USB successfully initialized and connected. [ 2379.510156][T22224] veth0_macvtap: entered promiscuous mode [ 2379.535155][T22224] veth1_macvtap: entered promiscuous mode [ 2379.587612][T22224] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2379.701126][T22224] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2379.712931][T14340] usb 3-1: USB disconnect, device number 110 [ 2379.742850][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2379.760715][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2379.811430][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2379.821042][T14137] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 2379.877258][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2379.918184][T14340] dvb-usb: Medion CTX1921 DVB-T USB successfully deinitialized and disconnected. [ 2379.979882][T14137] usb 4-1: device descriptor read/64, error -71 [ 2380.119963][T14137] usb usb4-port1: attempt power cycle [ 2380.142410][T22956] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8879'. [ 2380.151489][T29856] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 2380.206993][T14055] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2380.222243][T14055] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2380.319459][T29856] usb 6-1: Using ep0 maxpacket: 8 [ 2380.330891][T29856] usb 6-1: config 1 has an invalid descriptor of length 251, skipping remainder of the config [ 2380.358315][T29856] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 64256, setting to 64 [ 2380.387917][T15036] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2380.402507][T29856] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2380.418432][T15036] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2380.464119][T29856] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 2380.489654][T14137] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 2380.497124][T29856] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2380.497183][T29856] usb 6-1: Product: syz [ 2380.497201][T29856] usb 6-1: Manufacturer: syz [ 2380.497219][T29856] usb 6-1: SerialNumber: syz [ 2380.705140][T22968] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8880'. [ 2380.746393][T29856] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 2380.792082][T29856] usbtest 6-1:1.0: couldn't get endpoints, -22 [ 2380.810553][T29856] usbtest 6-1:1.0: probe with driver usbtest failed with error -22 [ 2380.912157][T14137] usb 4-1: device descriptor read/8, error -71 [ 2381.066462][ T129] usb 6-1: USB disconnect, device number 33 [ 2381.310503][T14137] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 2381.349385][T14137] usb 4-1: device descriptor read/8, error -71 [ 2381.462681][T14137] usb usb4-port1: unable to enumerate USB device [ 2382.246133][T23001] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8883'. [ 2382.263104][T23001] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8883'. [ 2382.585049][T23003] netlink: 'syz.2.8885': attribute type 8 has an invalid length. [ 2383.150011][T14137] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 2383.343587][T14137] usb 4-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x44, changing to 0x4 [ 2383.356823][T23014] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8888'. [ 2383.383541][T14137] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 2383.419322][T14137] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x4 has invalid maxpacket 16706, setting to 64 [ 2383.443061][T23016] FAULT_INJECTION: forcing a failure. [ 2383.443061][T23016] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2383.477709][T14137] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2383.550261][T23016] CPU: 0 UID: 0 PID: 23016 Comm: syz.5.8887 Tainted: G L syzkaller #0 PREEMPT(full) [ 2383.550297][T23016] Tainted: [L]=SOFTLOCKUP [ 2383.550306][T23016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2383.550320][T23016] Call Trace: [ 2383.550329][T23016] [ 2383.550338][T23016] dump_stack_lvl+0xe8/0x150 [ 2383.550371][T23016] should_fail_ex+0x414/0x560 [ 2383.550411][T23016] prepare_alloc_pages+0x22b/0x650 [ 2383.550445][T23016] __alloc_frozen_pages_noprof+0x123/0x370 [ 2383.550475][T23016] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2383.550509][T23016] ? policy_nodemask+0x27c/0x720 [ 2383.550540][T23016] alloc_pages_mpol+0x232/0x4a0 [ 2383.550583][T23016] folio_alloc_mpol_noprof+0x39/0x70 [ 2383.550610][T23016] shmem_alloc_and_add_folio+0x423/0xf40 [ 2383.550645][T23016] ? filemap_get_entry+0xad/0x2f0 [ 2383.550660][T23016] ? filemap_get_entry+0xad/0x2f0 [ 2383.550675][T23016] ? filemap_get_entry+0x28f/0x2f0 [ 2383.550692][T23016] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 2383.550723][T23016] ? shmem_allowable_huge_orders+0x1d4/0x4e0 [ 2383.550751][T23016] shmem_get_folio_gfp+0x59d/0x1660 [ 2383.550787][T23016] shmem_write_begin+0x16c/0x330 [ 2383.550816][T23016] generic_perform_write+0x2c5/0x900 [ 2383.550848][T23016] ? __pfx_generic_perform_write+0x10/0x10 [ 2383.550868][T23016] ? down_write+0x162/0x1f0 [ 2383.550894][T23016] ? file_update_time_flags+0x2cb/0x4e0 [ 2383.550921][T23016] shmem_file_write_iter+0xf8/0x120 [ 2383.550948][T23016] vfs_write+0x5c9/0xb30 [ 2383.550967][T23016] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 2383.551014][T23016] ? __pfx_vfs_write+0x10/0x10 [ 2383.551039][T23016] ? __fget_files+0x2a/0x420 [ 2383.551068][T23016] ksys_write+0x145/0x250 [ 2383.551093][T23016] ? __pfx_ksys_write+0x10/0x10 [ 2383.551119][T23016] __do_fast_syscall_32+0x1dc/0x560 [ 2383.551141][T23016] ? lockdep_hardirqs_on+0x7b/0x110 [ 2383.551160][T23016] ? do_fast_syscall_32+0x34/0x80 [ 2383.551180][T23016] ? irqentry_exit+0x10f/0x660 [ 2383.551200][T23016] do_fast_syscall_32+0x34/0x80 [ 2383.551220][T23016] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2383.551242][T23016] RIP: 0023:0xf6ffd539 [ 2383.551256][T23016] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2383.551272][T23016] RSP: 002b:00000000f53cc55c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 2383.551296][T23016] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000000 [ 2383.551308][T23016] RDX: 000000000208e24b RSI: 0000000000000000 RDI: 0000000000000000 [ 2383.551319][T23016] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2383.551329][T23016] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2383.551339][T23016] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2383.551364][T23016] [ 2383.552842][T14137] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2384.166288][T14137] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2384.255243][T14137] usb 4-1: Product: syz [ 2384.305732][T14137] usb 4-1: Manufacturer: syz [ 2384.375180][T14137] usb 4-1: SerialNumber: syz [ 2384.410646][T14137] usb 4-1: config 0 descriptor?? [ 2384.434015][T23007] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2384.570323][T14137] usb 4-1: selecting invalid altsetting 0 [ 2385.028552][T23059] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8894'. [ 2385.880041][T23081] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 2385.891406][T23081] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 2386.185356][T29856] usb 4-1: USB disconnect, device number 6 [ 2386.239318][ T39] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 2386.420051][ T39] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 2386.461764][ T39] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2386.577039][ T39] usb 6-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=a2.bf [ 2386.615352][ T39] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2386.636810][ T39] usb 6-1: Product: syz [ 2386.650922][ T39] usb 6-1: Manufacturer: syz [ 2386.659279][ T39] usb 6-1: SerialNumber: syz [ 2386.676662][ T39] usb 6-1: config 0 descriptor?? [ 2386.713281][ T39] ssu100 6-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 2386.943845][T23082] netlink: 'syz.5.8897': attribute type 2 has an invalid length. [ 2386.989512][T23082] !: entered promiscuous mode [ 2387.058500][ T39] ssu100 6-1:0.0: probe with driver ssu100 failed with error -110 [ 2387.124624][T23082] netlink: 'syz.5.8897': attribute type 2 has an invalid length. [ 2387.133416][T23082] !: left promiscuous mode [ 2388.358027][T23124] netlink: 'syz.3.8902': attribute type 21 has an invalid length. [ 2388.610160][T23124] netlink: 584 bytes leftover after parsing attributes in process `syz.3.8902'. [ 2388.791220][T23134] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8906'. [ 2389.795092][T29003] usb 6-1: USB disconnect, device number 34 [ 2389.892539][T23148] netlink: 'syz.1.8908': attribute type 1 has an invalid length. [ 2390.616480][T23172] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8914'. [ 2390.662375][ T2244] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 2390.778625][T23176] FAULT_INJECTION: forcing a failure. [ 2390.778625][T23176] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2390.819604][ T2244] usb 2-1: Using ep0 maxpacket: 16 [ 2390.824546][T23176] CPU: 0 UID: 0 PID: 23176 Comm: syz.2.8915 Tainted: G L syzkaller #0 PREEMPT(full) [ 2390.824636][T23176] Tainted: [L]=SOFTLOCKUP [ 2390.824657][T23176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2390.824698][T23176] Call Trace: [ 2390.824722][T23176] [ 2390.824752][T23176] dump_stack_lvl+0xe8/0x150 [ 2390.824803][T23176] should_fail_ex+0x414/0x560 [ 2390.824866][T23176] copy_folio_from_iter_atomic+0x30b/0x1910 [ 2390.824964][T23176] ? shmem_allowable_huge_orders+0x1d4/0x4e0 [ 2390.825119][T23176] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 2390.825207][T23176] ? shmem_write_begin+0x1d8/0x330 [ 2390.825321][T23176] generic_perform_write+0x5df/0x900 [ 2390.825413][T23176] ? __pfx_generic_perform_write+0x10/0x10 [ 2390.825475][T23176] ? down_write+0x162/0x1f0 [ 2390.825568][T23176] ? file_update_time_flags+0x2cb/0x4e0 [ 2390.825664][T23176] shmem_file_write_iter+0xf8/0x120 [ 2390.825757][T23176] vfs_write+0x5c9/0xb30 [ 2390.825828][T23176] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 2390.825914][T23176] ? __pfx_vfs_write+0x10/0x10 [ 2390.826000][T23176] ? __fget_files+0x2a/0x420 [ 2390.826103][T23176] ksys_write+0x145/0x250 [ 2390.826160][T23176] ? __pfx_ksys_write+0x10/0x10 [ 2390.826252][T23176] __do_fast_syscall_32+0x1dc/0x560 [ 2390.826334][T23176] ? lockdep_hardirqs_on+0x7b/0x110 [ 2390.826409][T23176] ? do_fast_syscall_32+0x34/0x80 [ 2390.826472][T23176] ? irqentry_exit+0x10f/0x660 [ 2390.826545][T23176] do_fast_syscall_32+0x34/0x80 [ 2390.826609][T23176] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2390.826683][T23176] RIP: 0023:0xf7f13539 [ 2390.826731][T23176] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2390.826784][T23176] RSP: 002b:00000000f53e555c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 2390.826852][T23176] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000000 [ 2390.826886][T23176] RDX: 000000000208e24b RSI: 0000000000000000 RDI: 0000000000000000 [ 2390.826925][T23176] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2390.826958][T23176] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2390.826991][T23176] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2390.827084][T23176] [ 2391.066119][ T2244] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 2391.081141][ T2244] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2391.128913][ T2244] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2391.138786][ T2244] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2391.154372][ T2244] usb 2-1: Product: syz [ 2391.221534][ T2244] usb 2-1: Manufacturer: syz [ 2391.226187][ T2244] usb 2-1: SerialNumber: syz [ 2391.301938][T23183] netlink: 'syz.5.8917': attribute type 21 has an invalid length. [ 2391.317246][T23183] netlink: 584 bytes leftover after parsing attributes in process `syz.5.8917'. [ 2391.693487][ T2244] usb 2-1: config 0 descriptor?? [ 2391.713223][ T2244] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2391.747243][ T2244] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 2392.210245][T29003] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 2392.304948][T23203] netlink: 'syz.4.8922': attribute type 21 has an invalid length. [ 2392.318801][T23203] netlink: 584 bytes leftover after parsing attributes in process `syz.4.8922'. [ 2392.428493][ T2244] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 2392.440546][T29003] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 2392.448782][ T2244] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 2392.481575][T29003] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2392.511368][T29003] usb 4-1: Product: syz [ 2392.527378][T29003] usb 4-1: Manufacturer: syz [ 2392.548373][T29003] usb 4-1: SerialNumber: syz [ 2392.814246][T23192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2392.826036][T23192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2392.863537][T23192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2393.033288][T23217] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8925'. [ 2393.166548][T23192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2393.190707][ T2244] em28xx 2-1:0.0: Unknown AC97 audio processor detected! [ 2393.204468][T23192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2393.215556][ T2244] em28xx 2-1:0.0: couldn't setup AC97 register 2 [ 2393.246555][T23192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2393.271966][ T2244] em28xx 2-1:0.0: couldn't setup AC97 register 4 [ 2393.286677][T23192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2393.298117][ T2244] em28xx 2-1:0.0: couldn't setup AC97 register 6 [ 2393.308483][ T2244] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 2393.322683][ T2244] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 2393.346954][T23163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2393.356409][T23163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2393.367859][T23192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2393.408306][T23192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2393.427071][T23192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2393.631182][T23236] netlink: 44 bytes leftover after parsing attributes in process `syz.5.8926'. [ 2393.654126][T23236] netlink: 44 bytes leftover after parsing attributes in process `syz.5.8926'. [ 2393.733267][T29003] (unnamed net_device) (uninitialized): Assigned a random MAC address: d6:36:07:78:dd:2e [ 2393.789995][T29003] rtl8150 4-1:1.0: eth5: rtl8150 is detected [ 2393.820395][ T2244] em28xx 2-1:0.0: couldn't setup AC97 register 2 [ 2393.828851][ T2244] em28xx 2-1:0.0: couldn't setup AC97 register 4 [ 2393.848757][T29003] usb 4-1: USB disconnect, device number 7 [ 2393.852796][ T2244] em28xx 2-1:0.0: couldn't setup AC97 register 6 [ 2393.892792][ T2244] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 2393.918304][ T2244] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 2393.969116][ T2244] usb 2-1: USB disconnect, device number 33 [ 2394.651765][T23291] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8934'. [ 2394.697230][T23294] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8934'. [ 2394.779309][ T39] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 2394.969434][ T5924] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 2394.987334][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 2395.031235][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2395.103316][ T39] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=a2.bf [ 2395.130011][ T39] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2395.135184][ T5924] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 2395.158279][ T5924] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 2395.168170][ T5924] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 2395.183091][ T39] usb 3-1: Product: syz [ 2395.209066][ T39] usb 3-1: Manufacturer: syz [ 2395.224392][ T39] usb 3-1: SerialNumber: syz [ 2395.224728][ T5924] usb 6-1: config 220 has no interface number 2 [ 2395.332616][ T39] usb 3-1: config 0 descriptor?? [ 2395.368473][ T39] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 2395.406094][ T5924] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 2395.485657][T23310] pim6reg: entered allmulticast mode [ 2395.522299][ T5924] usb 6-1: config 220 interface 0 has no altsetting 0 [ 2395.541189][ T5924] usb 6-1: config 220 interface 76 has no altsetting 0 [ 2395.552357][ T5924] usb 6-1: config 220 interface 1 has no altsetting 0 [ 2395.565487][T23280] netlink: 'syz.2.8929': attribute type 2 has an invalid length. [ 2395.590774][T23280] !: entered promiscuous mode [ 2395.601755][T23280] netlink: 'syz.2.8929': attribute type 2 has an invalid length. [ 2395.609755][T23280] !: left promiscuous mode [ 2395.829711][ T39] ssu100 3-1:0.0: probe with driver ssu100 failed with error -110 [ 2396.054343][ T5924] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 2396.115685][ T5924] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2396.137539][ T5924] usb 6-1: Product: syz [ 2396.145016][ T5924] usb 6-1: Manufacturer: syz [ 2396.166084][ T5924] usb 6-1: SerialNumber: syz [ 2397.627684][ T5924] usb 6-1: selecting invalid altsetting 0 [ 2397.652753][ T5924] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 2397.665534][ T5924] uvcvideo 6-1:220.0: No valid video chain found. [ 2397.936802][ T39] usb 3-1: USB disconnect, device number 111 [ 2397.972279][ T5924] usb 6-1: selecting invalid altsetting 0 [ 2398.118637][ T5924] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 2398.188774][ T5924] usb 6-1: USB disconnect, device number 35 [ 2398.388064][T23341] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2398.439454][T23341] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2398.459496][T23341] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2398.494810][T23341] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2398.581548][T23341] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 2398.640735][T23361] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8944'. [ 2398.651047][T23341] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 2398.700886][T23341] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2398.722834][T23341] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 2398.806276][T23359] netlink: 'syz.4.8942': attribute type 21 has an invalid length. [ 2398.826143][T23359] netlink: 584 bytes leftover after parsing attributes in process `syz.4.8942'. [ 2398.868240][T23361] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8944'. [ 2398.922554][T23361] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8944'. [ 2398.935831][T23341] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 2398.954234][T23361] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8944'. [ 2399.056873][T15600] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2399.075915][T15600] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2399.088024][T15600] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2399.098734][T15600] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2399.114098][T15600] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2399.252369][T23376] netlink: 'syz.1.8946': attribute type 1 has an invalid length. [ 2400.259979][ T5833] Bluetooth: hci2: command 0x0406 tx timeout [ 2400.387050][ T6772] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2400.408846][T23508] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8951'. [ 2400.465882][T23375] chnl_net:caif_netlink_parms(): no params data found [ 2400.499661][ T5833] Bluetooth: hci3: command 0x0c1a tx timeout [ 2400.500721][T15600] Bluetooth: hci1: command 0x0c1a tx timeout [ 2400.617289][ T6772] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2400.738708][T23522] netlink: 44 bytes leftover after parsing attributes in process `syz.2.8954'. [ 2400.753013][T15600] Bluetooth: hci4: command 0x0c1a tx timeout [ 2400.772402][T23522] netlink: 44 bytes leftover after parsing attributes in process `syz.2.8954'. [ 2400.961852][T23532] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8955'. [ 2401.012651][ T6772] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2401.141273][T15600] Bluetooth: hci5: command tx timeout [ 2401.560704][ T5924] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 2401.582744][T23631] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8956'. [ 2401.691674][ T6772] bond0: (slave netdevsim0): Releasing backup interface [ 2401.723066][ T5924] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 2401.735770][ T5924] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 2401.747582][ T5924] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 2401.793741][ T6772] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2401.872961][ T5924] usb 6-1: config 220 has no interface number 2 [ 2401.898638][ T5924] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 2401.985075][ T5924] usb 6-1: config 220 interface 0 has no altsetting 0 [ 2402.006771][ T5924] usb 6-1: config 220 interface 76 has no altsetting 0 [ 2402.015062][ T5924] usb 6-1: config 220 interface 1 has no altsetting 0 [ 2402.025392][ T5924] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 2402.038377][ T5924] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2402.048216][ T5924] usb 6-1: Product: syz [ 2402.055618][ T5924] usb 6-1: Manufacturer: syz [ 2402.061234][ T5924] usb 6-1: SerialNumber: syz [ 2402.246995][T23375] bridge0: port 1(bridge_slave_0) entered blocking state [ 2402.260342][T23375] bridge0: port 1(bridge_slave_0) entered disabled state [ 2402.276891][T23375] bridge_slave_0: entered allmulticast mode [ 2402.294113][T23375] bridge_slave_0: entered promiscuous mode [ 2402.354482][T23375] bridge0: port 2(bridge_slave_1) entered blocking state [ 2402.362886][ T39] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 2402.380954][T23375] bridge0: port 2(bridge_slave_1) entered disabled state [ 2402.388470][T23375] bridge_slave_1: entered allmulticast mode [ 2402.399679][T23375] bridge_slave_1: entered promiscuous mode [ 2402.534609][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2402.576529][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2402.586521][T15600] Bluetooth: hci3: command 0x0c1a tx timeout [ 2402.593899][T23375] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2402.639318][ T39] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2402.676743][T23375] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2402.699367][ T39] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2402.720225][ T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2402.754287][ T39] usb 3-1: config 0 descriptor?? [ 2402.820878][T15600] Bluetooth: hci4: command 0x0c1a tx timeout [ 2402.998966][T23375] team0: Port device team_slave_0 added [ 2403.220053][T15600] Bluetooth: hci5: command tx timeout [ 2403.420692][ T2244] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 2403.591604][ T2244] usb 2-1: Using ep0 maxpacket: 32 [ 2403.602921][ T2244] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 2403.630488][ T2244] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 2403.639196][ T2244] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 2403.670222][ T2244] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2403.682172][ T6772] bond5 (unregistering): (slave geneve3): Releasing active interface [ 2403.692041][ T2244] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2403.709666][ T2244] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2403.737079][ T2244] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 2403.748439][ T6772] bond4 (unregistering): (slave geneve2): Releasing active interface [ 2403.756955][ T2244] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2403.792543][ T2244] usb 2-1: config 0 descriptor?? [ 2404.022912][ T2244] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 34 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 2404.054554][ T2244] usb 2-1: USB disconnect, device number 34 [ 2404.095050][ T2244] usblp0: removed [ 2404.111684][ T5924] usb 6-1: selecting invalid altsetting 0 [ 2404.118295][ T5924] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 2404.159756][ T5924] uvcvideo 6-1:220.0: No valid video chain found. [ 2404.192520][ T5924] usb 6-1: selecting invalid altsetting 0 [ 2404.202734][ T5924] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 2404.235234][ T5924] usb 6-1: USB disconnect, device number 36 [ 2404.324919][ T6772] bond0 (unregistering): Released all slaves [ 2404.569565][ T2244] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 2404.590225][T23828] __nla_validate_parse: 1 callbacks suppressed [ 2404.590245][T23828] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8967'. [ 2404.665982][T15600] Bluetooth: hci3: command 0x0c1a tx timeout [ 2404.687058][ T6772] bond1 (unregistering): Released all slaves [ 2404.741220][ T2244] usb 2-1: Using ep0 maxpacket: 32 [ 2404.754665][ T2244] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 2404.778396][ T2244] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 2404.797759][ T2244] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 2404.818006][ T2244] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2404.831755][ T2244] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2404.841535][ T2244] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2404.854806][ T2244] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 2404.869291][ T2244] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2404.904483][T15600] Bluetooth: hci4: command 0x0c1a tx timeout [ 2404.917305][ T2244] usb 2-1: config 0 descriptor?? [ 2405.092344][ T6772] bond2 (unregistering): Released all slaves [ 2405.168875][ T2244] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 35 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 2405.301274][T15600] Bluetooth: hci5: command tx timeout [ 2405.357790][T14340] usb 2-1: USB disconnect, device number 35 [ 2405.375048][T14340] usblp0: removed [ 2405.459626][ T6772] bond3 (unregistering): Released all slaves [ 2405.698435][ T6772] bond4 (unregistering): Released all slaves [ 2405.868470][ T6772] bond5 (unregistering): Released all slaves [ 2406.025741][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 2406.033062][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 2406.085699][ T6772] bond6 (unregistering): Released all slaves [ 2406.141497][T23849] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8969'. [ 2406.559671][ T6772] bond7 (unregistering): Released all slaves [ 2406.838888][ T6772] bond8 (unregistering): Released all slaves [ 2406.873674][ T6772] bond9 (unregistering): Released all slaves [ 2406.902091][ T6772] bond10 (unregistering): Released all slaves [ 2407.071362][ T6772] bond11 (unregistering): Released all slaves [ 2407.113610][T23375] team0: Port device team_slave_1 added [ 2407.179832][ T39] usbhid 3-1:0.0: can't add hid device: -71 [ 2407.197686][ T39] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2407.241129][T23781] vlan2: entered promiscuous mode [ 2407.325669][ T39] usb 3-1: USB disconnect, device number 112 [ 2407.389397][T15600] Bluetooth: hci5: command tx timeout [ 2407.434665][ T6772] tipc: Left network mode [ 2407.524653][T23888] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8970'. [ 2407.587698][T23889] fuse: Bad value for 'fd' [ 2407.637007][T23375] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2407.671168][T23375] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2407.762499][T23375] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2408.037562][T23375] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2408.045731][T23375] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2408.162535][T23375] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2408.483184][ T6772] hsr_slave_0: left promiscuous mode [ 2408.513700][ T6772] hsr_slave_1: left promiscuous mode [ 2408.590923][T14340] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 2408.622879][ T6772] veth1_macvtap: left promiscuous mode [ 2408.649574][ T6772] veth0_macvtap: left promiscuous mode [ 2408.757420][T14340] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 2408.766298][T14340] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 2408.786801][T14340] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 2408.841512][T14340] usb 6-1: config 220 has no interface number 2 [ 2408.847881][T14340] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 2408.849956][T14137] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 2409.058457][T14340] usb 6-1: config 220 interface 0 has no altsetting 0 [ 2409.076948][T14340] usb 6-1: config 220 interface 76 has no altsetting 0 [ 2409.097813][ T6772] pim6reg (unregistering): left allmulticast mode [ 2409.101073][T14340] usb 6-1: config 220 interface 1 has no altsetting 0 [ 2409.146009][T14340] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 2409.161541][T14137] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 2409.166367][T14340] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2409.208204][T14137] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2409.210874][T14340] usb 6-1: Product: syz [ 2409.273880][T14340] usb 6-1: Manufacturer: syz [ 2409.293084][T14137] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=a2.bf [ 2409.300305][T14340] usb 6-1: SerialNumber: syz [ 2409.307019][T14137] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2409.322198][T14137] usb 2-1: Product: syz [ 2409.326539][T14137] usb 2-1: Manufacturer: syz [ 2409.360301][T14137] usb 2-1: SerialNumber: syz [ 2409.408159][T14137] usb 2-1: config 0 descriptor?? [ 2409.444462][T14137] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 2409.464091][T23964] fuse: Bad value for 'fd' [ 2409.646909][T23952] netlink: 'syz.1.8975': attribute type 2 has an invalid length. [ 2409.797596][T23968] netlink: 'syz.1.8975': attribute type 2 has an invalid length. [ 2409.831089][T14137] ssu100 2-1:0.0: probe with driver ssu100 failed with error -110 [ 2411.015081][T14340] usb 6-1: selecting invalid altsetting 0 [ 2411.026870][T14340] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 2411.051010][T14340] uvcvideo 6-1:220.0: No valid video chain found. [ 2411.160834][T14340] usb 6-1: selecting invalid altsetting 0 [ 2411.166633][T14340] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 2411.203969][T14340] usb 6-1: USB disconnect, device number 37 [ 2411.286149][T23989] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8981'. [ 2411.938989][T23375] hsr_slave_0: entered promiscuous mode [ 2411.952738][T23375] hsr_slave_1: entered promiscuous mode [ 2411.960632][T23375] debugfs: 'hsr0' already exists in 'hsr' [ 2411.966483][T23375] Cannot create hsr debugfs directory [ 2411.992676][T23952] !: entered promiscuous mode [ 2412.119969][T23968] !: left promiscuous mode [ 2412.401511][T24036] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8982'. [ 2412.441043][T24034] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8992'. [ 2412.528786][T14340] usb 2-1: USB disconnect, device number 36 [ 2413.623013][T24075] input: syz1 as /devices/virtual/input/input138 [ 2414.498224][T23375] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2414.655173][T23375] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2414.738888][T23375] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2414.806671][T23375] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2415.332022][T24139] netlink: 'syz.1.8989': attribute type 21 has an invalid length. [ 2415.461500][T24141] netlink: 584 bytes leftover after parsing attributes in process `syz.1.8989'. [ 2415.861765][T23375] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2415.935002][T23375] 8021q: adding VLAN 0 to HW filter on device team0 [ 2416.340855][ T1009] bridge0: port 1(bridge_slave_0) entered blocking state [ 2416.348032][ T1009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2416.490461][ T1009] bridge0: port 2(bridge_slave_1) entered blocking state [ 2416.497671][ T1009] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2416.607326][T24155] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8991'. [ 2416.634896][T23375] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2416.716934][T24155] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8991'. [ 2416.762399][T23375] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2416.785107][T24155] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8991'. [ 2416.826914][T24155] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8991'. [ 2416.902161][T23375] veth0_vlan: entered promiscuous mode [ 2416.951138][T23375] veth1_vlan: entered promiscuous mode [ 2417.083235][T23375] veth0_macvtap: entered promiscuous mode [ 2417.106222][T23375] veth1_macvtap: entered promiscuous mode [ 2417.185540][T23375] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2417.223468][T23375] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2417.258159][T14055] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2417.294866][T14055] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2417.324575][T14055] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2417.333625][ T129] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 2417.364370][T14055] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2417.499717][ T129] usb 6-1: Using ep0 maxpacket: 32 [ 2417.507984][ T129] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 2417.533021][T15256] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2417.549743][ T129] usb 6-1: config 0 has no interface number 0 [ 2417.566054][T15256] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2417.587635][ T129] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 2417.603686][ T129] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2417.626757][ T129] usb 6-1: Product: syz [ 2417.649025][T24178] netlink: 44 bytes leftover after parsing attributes in process `syz.1.8997'. [ 2417.668941][ T129] usb 6-1: Manufacturer: syz [ 2417.679712][ T129] usb 6-1: SerialNumber: syz [ 2417.681036][T24178] netlink: 44 bytes leftover after parsing attributes in process `syz.1.8997'. [ 2417.693016][T14055] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2417.734738][ T129] usb 6-1: config 0 descriptor?? [ 2417.743024][T14055] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2417.768251][ T129] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 2418.000767][ T129] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 2418.063993][ T129] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 2418.186846][T24206] ip6tnl0: Caught tx_queue_len zero misconfig [ 2418.275545][T24161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2418.294162][T24161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2418.394996][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 113 [ 2418.622101][ C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 2418.630654][T14137] usb 6-1: USB disconnect, device number 38 [ 2418.653831][T14137] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 2418.725917][T14137] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 2418.850459][T14137] quatech2 6-1:0.51: device disconnected [ 2419.870256][ T6295] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 2419.948876][T24271] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9010'. [ 2420.050771][ T6295] usb 6-1: Using ep0 maxpacket: 16 [ 2420.060574][ T5924] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 2420.070434][ T6295] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2420.083880][T24277] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9012'. [ 2420.083921][ T6295] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2420.106713][ T6295] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 2420.116670][ T6295] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2420.128887][ T6295] usb 6-1: config 0 descriptor?? [ 2420.250314][ T5924] usb 3-1: Using ep0 maxpacket: 32 [ 2420.258594][ T5924] usb 3-1: config 0 has no interfaces? [ 2420.267487][ T5924] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 2420.300489][ T5924] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2420.314148][T24283] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9014'. [ 2420.324658][T24283] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9014'. [ 2420.335091][ T5924] usb 3-1: config 0 descriptor?? [ 2420.561806][T24263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2420.572129][T24263] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2420.587817][T24263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2420.596876][T14806] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 2420.612598][T24263] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2420.645748][ T6295] usbhid 6-1:0.0: can't add hid device: -71 [ 2420.656435][ T129] usb 3-1: USB disconnect, device number 113 [ 2420.661655][ T6295] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2420.688129][ T6295] usb 6-1: USB disconnect, device number 39 [ 2420.739643][T14806] usb 2-1: Using ep0 maxpacket: 16 [ 2420.756916][T14806] usb 2-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2420.773723][T14806] usb 2-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2420.784479][T14806] usb 2-1: config 7 interface 0 altsetting 5 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 2420.795680][T14806] usb 2-1: config 7 interface 0 altsetting 5 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2420.808092][T14806] usb 2-1: config 7 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 2420.824662][T14806] usb 2-1: config 7 interface 0 has no altsetting 0 [ 2420.832527][T14806] usb 2-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 2420.841831][T14806] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2421.340819][T14806] input: HID 0458:5010 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:7.0/0003:0458:5010.0053/input/input139 [ 2421.464296][T14806] kye 0003:0458:5010.0053: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.1-1/input0 [ 2421.649942][T24328] netlink: 'syz.2.9016': attribute type 11 has an invalid length. [ 2421.719000][T14806] usb 2-1: USB disconnect, device number 37 [ 2422.574733][T24352] __nla_validate_parse: 1 callbacks suppressed [ 2422.574748][T24352] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9018'. [ 2423.005498][T24359] loop5: detected capacity change from 0 to 7 [ 2423.062425][T24359] Dev loop5: unable to read RDB block 7 [ 2423.080514][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2423.103119][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2423.112287][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2423.135832][T24359] loop5: AHDI p1 p2 p3 [ 2423.141970][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2423.146216][T24359] loop5: partition table partially beyond EOD, [ 2423.150284][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2423.209491][T24359] truncated [ 2423.212898][T24359] loop5: p1 start 50331648 is beyond EOD, truncated [ 2423.292456][T24359] loop5: p2 size 1701016946 extends beyond EOD, truncated [ 2424.125102][T24368] chnl_net:caif_netlink_parms(): no params data found [ 2424.257783][T24491] FAULT_INJECTION: forcing a failure. [ 2424.257783][T24491] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2424.291964][T24491] CPU: 1 UID: 0 PID: 24491 Comm: syz.3.9026 Tainted: G L syzkaller #0 PREEMPT(full) [ 2424.291999][T24491] Tainted: [L]=SOFTLOCKUP [ 2424.292009][T24491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2424.292023][T24491] Call Trace: [ 2424.292033][T24491] [ 2424.292043][T24491] dump_stack_lvl+0xe8/0x150 [ 2424.292077][T24491] should_fail_ex+0x414/0x560 [ 2424.292117][T24491] copy_folio_from_iter_atomic+0x30b/0x1910 [ 2424.292172][T24491] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 2424.292202][T24491] ? shmem_write_begin+0x1d8/0x330 [ 2424.292235][T24491] generic_perform_write+0x5df/0x900 [ 2424.292269][T24491] ? __pfx_generic_perform_write+0x10/0x10 [ 2424.292292][T24491] ? do_raw_spin_unlock+0x122/0x240 [ 2424.292320][T24491] ? mnt_put_write_access_file+0xc0/0x100 [ 2424.292351][T24491] ? file_update_time_flags+0x448/0x4e0 [ 2424.292382][T24491] shmem_file_write_iter+0xf8/0x120 [ 2424.292413][T24491] vfs_write+0x5c9/0xb30 [ 2424.292435][T24491] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 2424.292463][T24491] ? __pfx_vfs_write+0x10/0x10 [ 2424.292489][T24491] ? __fget_files+0x2a/0x420 [ 2424.292520][T24491] ksys_write+0x145/0x250 [ 2424.292540][T24491] ? __pfx_ksys_write+0x10/0x10 [ 2424.292568][T24491] __do_fast_syscall_32+0x1dc/0x560 [ 2424.292589][T24491] ? lockdep_hardirqs_on+0x7b/0x110 [ 2424.292606][T24491] ? do_fast_syscall_32+0x34/0x80 [ 2424.292626][T24491] ? irqentry_exit+0x10f/0x660 [ 2424.292648][T24491] do_fast_syscall_32+0x34/0x80 [ 2424.292669][T24491] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2424.292691][T24491] RIP: 0023:0xf7f24539 [ 2424.292706][T24491] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2424.292722][T24491] RSP: 002b:00000000f53f555c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 2424.292741][T24491] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000000 [ 2424.292754][T24491] RDX: 000000000208e24b RSI: 0000000000000000 RDI: 0000000000000000 [ 2424.292766][T24491] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2424.292776][T24491] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2424.292788][T24491] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2424.292823][T24491] [ 2424.566640][T24498] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9027'. [ 2424.578463][T24498] netlink: 44 bytes leftover after parsing attributes in process `syz.5.9027'. [ 2424.789385][T24498] netlink: 44 bytes leftover after parsing attributes in process `syz.5.9027'. [ 2425.161575][T24518] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9028'. [ 2425.190551][T24518] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9028'. [ 2425.223176][T15600] Bluetooth: hci0: command tx timeout [ 2425.270642][T24518] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9028'. [ 2425.281257][T24518] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9028'. [ 2425.342241][T15256] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2425.671017][T15256] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2425.926994][T15256] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2426.495867][T15256] bond0: (slave netdevsim0): Releasing backup interface [ 2426.584699][T15256] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2426.609288][T14806] usb 6-1: new full-speed USB device number 40 using dummy_hcd [ 2426.657103][T24368] bridge0: port 1(bridge_slave_0) entered blocking state [ 2426.680177][T24368] bridge0: port 1(bridge_slave_0) entered disabled state [ 2426.711011][T24368] bridge_slave_0: entered allmulticast mode [ 2426.732127][T24368] bridge_slave_0: entered promiscuous mode [ 2426.781909][T24368] bridge0: port 2(bridge_slave_1) entered blocking state [ 2426.809651][T14806] usb 6-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x44, changing to 0x4 [ 2426.829930][T24368] bridge0: port 2(bridge_slave_1) entered disabled state [ 2426.848535][T14806] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 2426.867516][T24368] bridge_slave_1: entered allmulticast mode [ 2426.891063][T14806] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x4 has invalid maxpacket 16706, setting to 64 [ 2426.917932][T24368] bridge_slave_1: entered promiscuous mode [ 2426.943359][T14806] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2426.995520][T14806] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2427.029142][T14806] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2427.048031][T14806] usb 6-1: Product: syz [ 2427.156489][T14806] usb 6-1: Manufacturer: syz [ 2427.234662][T14806] usb 6-1: SerialNumber: syz [ 2427.273111][T14806] usb 6-1: config 0 descriptor?? [ 2427.296274][T24570] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2427.304192][T15600] Bluetooth: hci0: command tx timeout [ 2427.354429][T14806] usb 6-1: selecting invalid altsetting 0 [ 2427.365431][T24368] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2427.515263][T24368] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2427.934173][T24368] team0: Port device team_slave_0 added [ 2427.974009][T24368] team0: Port device team_slave_1 added [ 2428.334875][T15256] bond2 (unregistering): (slave gretap1): Releasing active interface [ 2428.396627][T15256] bond4 (unregistering): (slave geneve2): Releasing active interface [ 2428.545443][T15256] bond2 (unregistering): (slave bridge2): Releasing active interface [ 2428.784143][T15256] bond0 (unregistering): Released all slaves [ 2428.995811][T14340] usb 6-1: USB disconnect, device number 40 [ 2429.106370][T15256] bond1 (unregistering): Released all slaves [ 2429.136676][T15256] bond2 (unregistering): Released all slaves [ 2429.385175][T15600] Bluetooth: hci0: command tx timeout [ 2429.541091][T15256] bond3 (unregistering): Released all slaves [ 2430.241513][T15256] bond4 (unregistering): Released all slaves [ 2430.538189][T24368] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2430.546204][T15256] tipc: Left network mode [ 2430.586220][T24368] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2430.635942][T24368] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2430.665638][T24368] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2430.728405][T24368] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2430.824722][T24368] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2430.839685][T24737] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9040'. [ 2431.324390][T24368] hsr_slave_0: entered promiscuous mode [ 2431.399795][T24368] hsr_slave_1: entered promiscuous mode [ 2431.406309][T24368] debugfs: 'hsr0' already exists in 'hsr' [ 2431.490205][T15600] Bluetooth: hci0: command tx timeout [ 2431.508412][T24368] Cannot create hsr debugfs directory [ 2432.391007][T15256] hsr_slave_0: left promiscuous mode [ 2432.397245][T15256] hsr_slave_1: left promiscuous mode [ 2432.472505][T24799] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9045'. [ 2432.619672][T15256] veth1_macvtap: left promiscuous mode [ 2432.630469][T15256] veth0_macvtap: left promiscuous mode [ 2432.650370][T15256] veth1_vlan: left promiscuous mode [ 2432.675805][T15256] veth0_vlan: left promiscuous mode [ 2433.576126][T15256] pim6reg (unregistering): left allmulticast mode [ 2433.898768][T14340] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 2434.105250][T14340] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 2434.166980][T14340] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2434.254077][T14340] usb 6-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=a2.bf [ 2434.310306][T14340] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2434.318357][T14340] usb 6-1: Product: syz [ 2434.360539][T14340] usb 6-1: Manufacturer: syz [ 2434.365203][T14340] usb 6-1: SerialNumber: syz [ 2434.444947][T14340] usb 6-1: config 0 descriptor?? [ 2434.487255][T14340] ssu100 6-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 2434.822397][T14340] ssu100 6-1:0.0: probe with driver ssu100 failed with error -110 [ 2434.828621][T24813] netlink: 'syz.5.9047': attribute type 2 has an invalid length. [ 2434.835137][T24821] netlink: 'syz.3.9057': attribute type 1 has an invalid length. [ 2434.954913][T24825] netlink: 'syz.5.9047': attribute type 2 has an invalid length. [ 2436.995609][T24813] !: entered promiscuous mode [ 2437.072539][T24832] vlan2: entered promiscuous mode [ 2437.260978][T24825] !: left promiscuous mode [ 2437.393065][T24872] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9052'. [ 2437.536513][T14806] usb 6-1: USB disconnect, device number 41 [ 2437.569373][T18313] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 2437.673972][T24911] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9054'. [ 2437.743682][T18313] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 2437.781010][T18313] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 2437.794774][T18313] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2437.827581][T18313] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 2438.155293][T24939] program syz.4.9058 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2438.199616][T14806] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 2438.369419][T14806] usb 6-1: Using ep0 maxpacket: 8 [ 2438.399329][T14806] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2438.427130][T14806] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2438.516930][T14806] usb 6-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 2438.537057][T14806] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2438.616978][T14806] usb 6-1: config 0 descriptor?? [ 2438.773931][T24368] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2438.803794][T24368] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2438.838794][T24368] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2438.876925][T24368] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2438.912593][T18313] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -71 [ 2438.942500][T14806] isku 0003:1E7D:319C.0054: unknown main item tag 0x0 [ 2438.952676][T18313] stv0680 4-1:4.0: STV(e): camera ping failed!! [ 2438.980360][T14806] isku 0003:1E7D:319C.0054: unknown main item tag 0x0 [ 2438.997655][T18313] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 2439.149607][T18313] stv0680 4-1:4.0: last error: 0, command = 0x0 [ 2439.157263][T14806] isku 0003:1E7D:319C.0054: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.5-1/input0 [ 2439.171620][T18313] usb 4-1: USB disconnect, device number 8 [ 2439.219017][T14806] usb 6-1: USB disconnect, device number 42 [ 2440.038743][T24368] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2440.322821][T25018] netlink: 584 bytes leftover after parsing attributes in process `syz.3.9063'. [ 2440.371755][T24368] 8021q: adding VLAN 0 to HW filter on device team0 [ 2440.408899][T31141] bridge0: port 1(bridge_slave_0) entered blocking state [ 2440.416191][T31141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2440.467155][ T8823] bridge0: port 2(bridge_slave_1) entered blocking state [ 2440.474377][ T8823] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2440.854423][T24368] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2441.140515][T29003] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 2441.160249][T24368] veth0_vlan: entered promiscuous mode [ 2441.172043][T24368] veth1_vlan: entered promiscuous mode [ 2441.223811][T24368] veth0_macvtap: entered promiscuous mode [ 2441.237842][T24368] veth1_macvtap: entered promiscuous mode [ 2441.304874][T29003] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2441.314514][T29003] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2441.349023][T29003] usb 6-1: Product: syz [ 2441.358474][T24368] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2441.368435][T29003] usb 6-1: Manufacturer: syz [ 2441.377710][T29003] usb 6-1: SerialNumber: syz [ 2441.401466][T24368] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2441.427283][T29003] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2441.445914][ T5956] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2441.474056][ T6295] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2441.491286][ T5956] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2441.550118][ T5956] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2441.783319][ T5956] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2441.920529][T25024] syzkaller0: entered promiscuous mode [ 2441.926558][T25024] syzkaller0: entered allmulticast mode [ 2442.055683][T16455] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2442.089841][T16455] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2442.411093][T16455] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2442.451888][T16455] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2442.494126][ T978] usb 6-1: USB disconnect, device number 43 [ 2443.060446][ T6295] usb 6-1: Service connection timeout for: 256 [ 2443.068124][ T6295] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 2443.108863][ T6295] ath9k_htc: Failed to initialize the device [ 2443.132932][ T978] usb 6-1: ath9k_htc: USB layer deinitialized [ 2443.221743][T25084] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9071'. [ 2443.258846][T25084] bond0: ARP target 170.170.170.170 is already present [ 2443.305889][T25084] bond0: option arp_ip_target: invalid value (2863311530) [ 2443.371970][T25065] veth1_to_batadv: entered promiscuous mode [ 2443.405135][T25095] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9077'. [ 2443.726539][T25114] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9079'. [ 2443.738248][T25114] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9079'. [ 2443.787107][T25113] bridge_slave_0: left allmulticast mode [ 2443.793516][T25113] bridge_slave_0: left promiscuous mode [ 2443.800113][T25113] bridge0: port 1(bridge_slave_0) entered disabled state [ 2443.848235][T25113] bridge_slave_1: left allmulticast mode [ 2443.854046][T25113] bridge_slave_1: left promiscuous mode [ 2443.861046][T25113] bridge0: port 2(bridge_slave_1) entered disabled state [ 2444.100647][T25113] bond0: (slave bond_slave_0): Releasing backup interface [ 2444.177349][T25113] bond0: (slave bond_slave_1): Releasing backup interface [ 2444.210182][T25113] team0: Port device team_slave_0 removed [ 2444.283850][T25113] team0: Port device team_slave_1 removed [ 2444.373763][T25113] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2444.387620][T25113] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2444.418349][T25113] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2444.493763][T25113] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2444.619370][ T129] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 2444.666583][T25113] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2444.770371][ T129] usb 2-1: device descriptor read/64, error -71 [ 2445.019309][ T129] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 2445.159422][ T129] usb 2-1: device descriptor read/64, error -71 [ 2445.281287][ T129] usb usb2-port1: attempt power cycle [ 2445.335550][T25141] team_slave_0: entered promiscuous mode [ 2445.341325][T25141] team_slave_1: entered promiscuous mode [ 2445.366421][T25141] vlan2: entered promiscuous mode [ 2445.396818][T25141] team0: entered promiscuous mode [ 2445.536781][T25150] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9088'. [ 2445.649364][ T129] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 2445.680084][ T129] usb 2-1: device descriptor read/8, error -71 [ 2445.695327][T25157] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9090'. [ 2445.716052][ T30] audit: type=1326 audit(1766948537.566:2308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25152 comm="syz.5.9089" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 2445.760731][ T30] audit: type=1326 audit(1766948537.586:2309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25152 comm="syz.5.9089" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 2445.784008][T25159] bridge0: Caught tx_queue_len zero misconfig [ 2445.929393][ T129] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 2445.968854][ T129] usb 2-1: device descriptor read/8, error -71 [ 2446.090083][ T129] usb usb2-port1: unable to enumerate USB device [ 2447.497209][T25172] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9094'. [ 2447.599132][T25172] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9094'. [ 2448.930657][T25200] FAULT_INJECTION: forcing a failure. [ 2448.930657][T25200] name failslab, interval 1, probability 0, space 0, times 0 [ 2448.954367][T25200] CPU: 1 UID: 0 PID: 25200 Comm: syz.1.9099 Tainted: G L syzkaller #0 PREEMPT(full) [ 2448.954400][T25200] Tainted: [L]=SOFTLOCKUP [ 2448.954408][T25200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2448.954421][T25200] Call Trace: [ 2448.954430][T25200] [ 2448.954439][T25200] dump_stack_lvl+0xe8/0x150 [ 2448.954482][T25200] should_fail_ex+0x414/0x560 [ 2448.954517][T25200] should_failslab+0xa8/0x100 [ 2448.954543][T25200] kmem_cache_alloc_noprof+0x88/0x710 [ 2448.954592][T25200] ? radix_tree_node_alloc+0x7e/0x3a0 [ 2448.954628][T25200] radix_tree_node_alloc+0x7e/0x3a0 [ 2448.954666][T25200] radix_tree_extend+0x13b/0x550 [ 2448.954707][T25200] idr_get_free+0x1c2/0xa70 [ 2448.954751][T25200] idr_alloc_u32+0x159/0x2d0 [ 2448.954776][T25200] ? __pfx_idr_alloc_u32+0x10/0x10 [ 2448.954802][T25200] ? __kasan_kmalloc+0x93/0xb0 [ 2448.954830][T25200] idr_alloc+0x6e/0xd0 [ 2448.954852][T25200] shrinker_alloc+0x133/0xa80 [ 2448.954876][T25200] ? __raw_spin_lock_init+0x45/0x100 [ 2448.954910][T25200] ? __raw_spin_lock_init+0x45/0x100 [ 2448.954943][T25200] alloc_super+0x781/0xaa0 [ 2448.954980][T25200] sget_fc+0x329/0xa40 [ 2448.955012][T25200] ? __pfx_set_anon_super_fc+0x10/0x10 [ 2448.955030][T25200] ? __pfx_fuse_fill_super+0x10/0x10 [ 2448.955050][T25200] get_tree_nodev+0x2a/0x150 [ 2448.955072][T25200] fuse_get_tree+0x2fb/0x4f0 [ 2448.955096][T25200] vfs_get_tree+0x92/0x2a0 [ 2448.955119][T25200] do_new_mount+0x302/0xa10 [ 2448.955142][T25200] ? apparmor_capable+0x137/0x1a0 [ 2448.955177][T25200] ? __pfx_do_new_mount+0x10/0x10 [ 2448.955202][T25200] ? ns_capable+0x8a/0xf0 [ 2448.955229][T25200] ? path_mount+0x628/0xff0 [ 2448.955251][T25200] ? kmem_cache_free+0x197/0x620 [ 2448.955313][T25200] __se_sys_mount+0x313/0x410 [ 2448.955348][T25200] ? __pfx___se_sys_mount+0x10/0x10 [ 2448.955383][T25200] ? __ia32_sys_mount+0x20/0xc0 [ 2448.955414][T25200] __do_fast_syscall_32+0x1dc/0x560 [ 2448.955439][T25200] ? lockdep_hardirqs_on+0x7b/0x110 [ 2448.955460][T25200] ? do_fast_syscall_32+0x34/0x80 [ 2448.955484][T25200] ? irqentry_exit+0x10f/0x660 [ 2448.955511][T25200] do_fast_syscall_32+0x34/0x80 [ 2448.955537][T25200] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2448.955564][T25200] RIP: 0023:0xf704d539 [ 2448.955583][T25200] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2448.955601][T25200] RSP: 002b:00000000f541c55c EFLAGS: 00000206 ORIG_RAX: 0000000000000015 [ 2448.955625][T25200] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000100 [ 2448.955641][T25200] RDX: 0000000080000140 RSI: 0000000000000000 RDI: 0000000080002280 [ 2448.955655][T25200] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2448.955669][T25200] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2448.955686][T25200] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2448.955718][T25200] [ 2449.624188][T25203] netlink: 584 bytes leftover after parsing attributes in process `syz.2.9100'. [ 2450.490356][T25216] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9104'. [ 2450.811557][T25223] loop5: detected capacity change from 0 to 7 [ 2450.819112][T25223] Dev loop5: unable to read RDB block 7 [ 2450.825853][T25223] loop5: AHDI p1 p2 p3 [ 2451.028764][T25223] loop5: partition table partially beyond EOD, truncated [ 2451.111106][T25223] loop5: p1 start 50331648 is beyond EOD, truncated [ 2451.173318][T25223] loop5: p2 size 1701016946 extends beyond EOD, truncated [ 2451.352421][T25225] netlink: 584 bytes leftover after parsing attributes in process `syz.4.9107'. [ 2451.595661][T25236] netlink: 44 bytes leftover after parsing attributes in process `syz.1.9109'. [ 2451.606879][T25236] netlink: 44 bytes leftover after parsing attributes in process `syz.1.9109'. [ 2452.089513][T25239] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9112'. [ 2452.750358][ T978] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 2453.110023][ T978] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2453.179741][ T978] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2453.188717][ T978] usb 4-1: config 1 has no interface number 0 [ 2453.225456][ T978] usb 4-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2453.296986][ T6295] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 2453.312765][ T978] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2453.325987][ T978] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2453.335436][ T978] usb 4-1: Product: syz [ 2453.357716][ T978] usb 4-1: Manufacturer: syz [ 2453.370175][ T978] usb 4-1: SerialNumber: syz [ 2453.422045][ T978] usb 4-1: selecting invalid altsetting 1 [ 2453.534599][ T6295] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 2453.577088][ T6295] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 2453.607870][ T6295] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 2453.636133][ T6295] usb 3-1: config 220 has no interface number 2 [ 2453.655799][ T6295] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 2453.714402][ T6295] usb 3-1: config 220 interface 0 has no altsetting 0 [ 2453.744634][ T6295] usb 3-1: config 220 interface 76 has no altsetting 0 [ 2453.770163][ T6295] usb 3-1: config 220 interface 1 has no altsetting 0 [ 2453.804107][ T6295] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 2453.825193][T25251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2453.835901][T25251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2453.853398][ T6295] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2453.877915][ T978] cdc_ncm 4-1:1.1: failed GET_NTB_PARAMETERS [ 2453.885988][T25252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2453.896856][ T978] cdc_ncm 4-1:1.1: bind() failure [ 2453.907260][ T6295] usb 3-1: Product: syz [ 2453.923056][T25251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2453.941484][ T6295] usb 3-1: Manufacturer: syz [ 2454.002872][T25252] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2454.011242][T25251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2454.021995][ T6295] usb 3-1: SerialNumber: syz [ 2454.234132][ T5924] usb 4-1: USB disconnect, device number 9 [ 2455.042825][T25306] netlink: 584 bytes leftover after parsing attributes in process `syz.5.9121'. [ 2455.119147][T25304] netlink: 'syz.3.9120': attribute type 1 has an invalid length. [ 2455.338445][T25304] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2456.016966][T25352] netlink: 'syz.3.9123': attribute type 4 has an invalid length. [ 2456.047133][T25352] netlink: 'syz.3.9123': attribute type 4 has an invalid length. [ 2456.211481][ T6295] usb 3-1: selecting invalid altsetting 0 [ 2456.223401][ T6295] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 2456.234365][ T6295] uvcvideo 3-1:220.0: No valid video chain found. [ 2456.322598][ T6295] usb 3-1: selecting invalid altsetting 0 [ 2456.340111][T14340] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 2456.407026][ T6295] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 2456.436139][ T6295] usb 3-1: USB disconnect, device number 114 [ 2456.552643][T14340] usb 4-1: Using ep0 maxpacket: 8 [ 2456.630967][T14340] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 2456.650171][T14340] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2456.683669][T14340] pvrusb2: Hardware description: Terratec Grabster AV400 [ 2456.696264][T14340] pvrusb2: ********** [ 2456.717870][T14340] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 2456.743658][T14340] pvrusb2: Important functionality might not be entirely working. [ 2456.753884][T14340] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 2456.765926][T14340] pvrusb2: ********** [ 2456.899418][ T2346] pvrusb2: Invalid write control endpoint [ 2457.007234][T25392] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9127'. [ 2457.169676][ T2346] pvrusb2: Invalid write control endpoint [ 2457.213244][ T2346] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 2457.262371][ T2346] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 2457.310407][ T2346] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 2457.341967][ T2346] pvrusb2: Device being rendered inoperable [ 2457.376001][T25404] FAULT_INJECTION: forcing a failure. [ 2457.376001][T25404] name failslab, interval 1, probability 0, space 0, times 0 [ 2457.411559][ T2346] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 2457.452401][ T2346] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 2457.490040][T25404] CPU: 0 UID: 0 PID: 25404 Comm: syz.4.9128 Tainted: G L syzkaller #0 PREEMPT(full) [ 2457.490074][T25404] Tainted: [L]=SOFTLOCKUP [ 2457.490083][T25404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2457.490108][T25404] Call Trace: [ 2457.490116][T25404] [ 2457.490126][T25404] dump_stack_lvl+0xe8/0x150 [ 2457.490157][T25404] should_fail_ex+0x414/0x560 [ 2457.490196][T25404] should_failslab+0xa8/0x100 [ 2457.490226][T25404] kmem_cache_alloc_noprof+0x88/0x710 [ 2457.490259][T25404] ? radix_tree_node_alloc+0x7e/0x3a0 [ 2457.490295][T25404] radix_tree_node_alloc+0x7e/0x3a0 [ 2457.490340][T25404] radix_tree_extend+0x13b/0x550 [ 2457.490376][T25404] idr_get_free+0x1c2/0xa70 [ 2457.490421][T25404] idr_alloc_u32+0x159/0x2d0 [ 2457.490447][T25404] ? __pfx_idr_alloc_u32+0x10/0x10 [ 2457.490472][T25404] ? __kasan_kmalloc+0x93/0xb0 [ 2457.490501][T25404] idr_alloc+0x6e/0xd0 [ 2457.490523][T25404] shrinker_alloc+0x133/0xa80 [ 2457.490546][T25404] ? __raw_spin_lock_init+0x45/0x100 [ 2457.490579][T25404] ? __raw_spin_lock_init+0x45/0x100 [ 2457.490614][T25404] alloc_super+0x781/0xaa0 [ 2457.490650][T25404] sget_fc+0x329/0xa40 [ 2457.490681][T25404] ? __pfx_set_anon_super_fc+0x10/0x10 [ 2457.490700][T25404] ? __pfx_fuse_fill_super+0x10/0x10 [ 2457.490722][T25404] get_tree_nodev+0x2a/0x150 [ 2457.490744][T25404] fuse_get_tree+0x2fb/0x4f0 [ 2457.490769][T25404] vfs_get_tree+0x92/0x2a0 [ 2457.490794][T25404] do_new_mount+0x302/0xa10 [ 2457.490818][T25404] ? apparmor_capable+0x137/0x1a0 [ 2457.490857][T25404] ? __pfx_do_new_mount+0x10/0x10 [ 2457.490883][T25404] ? ns_capable+0x8a/0xf0 [ 2457.490907][T25404] ? path_mount+0x628/0xff0 [ 2457.490948][T25404] ? kmem_cache_free+0x197/0x620 [ 2457.490981][T25404] __se_sys_mount+0x313/0x410 [ 2457.491026][T25404] ? __pfx___se_sys_mount+0x10/0x10 [ 2457.491072][T25404] ? __ia32_sys_mount+0x20/0xc0 [ 2457.491102][T25404] __do_fast_syscall_32+0x1dc/0x560 [ 2457.491127][T25404] ? lockdep_hardirqs_on+0x7b/0x110 [ 2457.491147][T25404] ? do_fast_syscall_32+0x34/0x80 [ 2457.491170][T25404] ? irqentry_exit+0x10f/0x660 [ 2457.491195][T25404] do_fast_syscall_32+0x34/0x80 [ 2457.491220][T25404] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2457.491245][T25404] RIP: 0023:0xf7fa1539 [ 2457.491263][T25404] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2457.491282][T25404] RSP: 002b:00000000f547555c EFLAGS: 00000206 ORIG_RAX: 0000000000000015 [ 2457.491304][T25404] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000100 [ 2457.491319][T25404] RDX: 0000000080000140 RSI: 0000000000000000 RDI: 0000000080002280 [ 2457.491333][T25404] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2457.491347][T25404] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2457.491359][T25404] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2457.491390][T25404] [ 2458.138329][ T2346] pvrusb2: Attached sub-driver cx25840 [ 2458.168574][ T2346] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 2458.182240][ T2346] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 2459.345829][T25435] netlink: 584 bytes leftover after parsing attributes in process `syz.4.9137'. [ 2459.383204][T14340] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 2459.476264][T29003] usb 4-1: USB disconnect, device number 10 [ 2459.602453][T14340] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 2459.626351][T14340] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 2459.710081][T14340] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 2459.782655][T14340] usb 3-1: config 220 has no interface number 2 [ 2459.802421][T14340] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 2459.866951][T14340] usb 3-1: config 220 interface 0 has no altsetting 0 [ 2459.926284][T14340] usb 3-1: config 220 interface 76 has no altsetting 0 [ 2459.947437][T14340] usb 3-1: config 220 interface 1 has no altsetting 0 [ 2459.997283][T14340] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 2460.027137][T14340] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2460.056414][T14340] usb 3-1: Product: syz [ 2460.069806][T14340] usb 3-1: Manufacturer: syz [ 2460.094810][T14340] usb 3-1: SerialNumber: syz [ 2461.148719][T25460] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9140'. [ 2461.580527][T14340] usb 3-1: selecting invalid altsetting 0 [ 2461.613540][T14340] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 2461.660561][T14340] uvcvideo 3-1:220.0: No valid video chain found. [ 2461.720721][T14340] usb 3-1: selecting invalid altsetting 0 [ 2461.726954][T14340] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 2461.789376][T14340] usb 3-1: USB disconnect, device number 115 [ 2462.780273][T25498] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9148'. [ 2463.034230][T25500] netlink: 'syz.2.9146': attribute type 12 has an invalid length. [ 2463.393520][T25509] loop5: detected capacity change from 0 to 7 [ 2463.453686][T25509] Dev loop5: unable to read RDB block 7 [ 2463.472742][T25509] loop5: AHDI p1 p2 p3 [ 2463.499424][T25509] loop5: partition table partially beyond EOD, truncated [ 2463.520152][T25509] loop5: p1 start 50331648 is beyond EOD, truncated [ 2463.570514][T25509] loop5: p2 size 1701016946 extends beyond EOD, truncated [ 2464.370753][T25529] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9152'. [ 2464.385111][T25529] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9152'. [ 2466.788086][T25552] FAULT_INJECTION: forcing a failure. [ 2466.788086][T25552] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2466.829300][T25552] CPU: 1 UID: 0 PID: 25552 Comm: syz.2.9156 Tainted: G L syzkaller #0 PREEMPT(full) [ 2466.829323][T25552] Tainted: [L]=SOFTLOCKUP [ 2466.829329][T25552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2466.829338][T25552] Call Trace: [ 2466.829344][T25552] [ 2466.829351][T25552] dump_stack_lvl+0xe8/0x150 [ 2466.829374][T25552] should_fail_ex+0x414/0x560 [ 2466.829399][T25552] copy_folio_from_iter_atomic+0x30b/0x1910 [ 2466.829416][T25552] ? shmem_allowable_huge_orders+0x1d4/0x4e0 [ 2466.829448][T25552] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 2466.829470][T25552] ? shmem_write_begin+0x1d8/0x330 [ 2466.829493][T25552] generic_perform_write+0x5df/0x900 [ 2466.829518][T25552] ? __pfx_generic_perform_write+0x10/0x10 [ 2466.829533][T25552] ? down_write+0x162/0x1f0 [ 2466.829555][T25552] ? file_update_time_flags+0x2cb/0x4e0 [ 2466.829579][T25552] shmem_file_write_iter+0xf8/0x120 [ 2466.829602][T25552] vfs_write+0x5c9/0xb30 [ 2466.829619][T25552] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 2466.829640][T25552] ? __pfx_vfs_write+0x10/0x10 [ 2466.829660][T25552] ? __fget_files+0x2a/0x420 [ 2466.829683][T25552] ksys_write+0x145/0x250 [ 2466.829698][T25552] ? __pfx_ksys_write+0x10/0x10 [ 2466.829719][T25552] __do_fast_syscall_32+0x1dc/0x560 [ 2466.829734][T25552] ? lockdep_hardirqs_on+0x7b/0x110 [ 2466.829747][T25552] ? do_fast_syscall_32+0x34/0x80 [ 2466.829762][T25552] ? irqentry_exit+0x10f/0x660 [ 2466.829779][T25552] do_fast_syscall_32+0x34/0x80 [ 2466.829795][T25552] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2466.829812][T25552] RIP: 0023:0xf707d539 [ 2466.829824][T25552] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2466.829836][T25552] RSP: 002b:00000000f544c55c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 2466.829851][T25552] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000000 [ 2466.829861][T25552] RDX: 000000000208e24b RSI: 0000000000000000 RDI: 0000000000000000 [ 2466.829869][T25552] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2466.829877][T25552] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2466.829886][T25552] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2466.829906][T25552] [ 2467.224414][T25556] PKCS7: Unknown OID: [4] 0.38.35.0.951690.11253 [ 2467.234079][T25556] PKCS7: Only support pkcs7_signedData type [ 2467.480011][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 2467.486497][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 2467.510061][ T593] usb 6-1: new full-speed USB device number 44 using dummy_hcd [ 2467.624407][T25568] FAULT_INJECTION: forcing a failure. [ 2467.624407][T25568] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2467.638882][T25568] CPU: 0 UID: 0 PID: 25568 Comm: syz.4.9160 Tainted: G L syzkaller #0 PREEMPT(full) [ 2467.638915][T25568] Tainted: [L]=SOFTLOCKUP [ 2467.638924][T25568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2467.638937][T25568] Call Trace: [ 2467.638946][T25568] [ 2467.638965][T25568] dump_stack_lvl+0xe8/0x150 [ 2467.638997][T25568] should_fail_ex+0x414/0x560 [ 2467.639035][T25568] _copy_from_user+0x2d/0xb0 [ 2467.639062][T25568] ucma_write+0x158/0x2e0 [ 2467.639088][T25568] ? __pfx_ucma_write+0x10/0x10 [ 2467.639111][T25568] ? security_file_permission+0x75/0x290 [ 2467.639134][T25568] ? rw_verify_area+0x255/0x4d0 [ 2467.639184][T25568] ? __pfx_ucma_write+0x10/0x10 [ 2467.639213][T25568] vfs_write+0x27e/0xb30 [ 2467.639242][T25568] ? __pfx_vfs_write+0x10/0x10 [ 2467.639265][T25568] ? __fget_files+0x2a/0x420 [ 2467.639296][T25568] ? __fget_files+0x2a/0x420 [ 2467.639322][T25568] ? __fget_files+0x3a0/0x420 [ 2467.639348][T25568] ? __fget_files+0x2a/0x420 [ 2467.639384][T25568] ksys_write+0x145/0x250 [ 2467.639407][T25568] ? __pfx_ksys_write+0x10/0x10 [ 2467.639439][T25568] __do_fast_syscall_32+0x1dc/0x560 [ 2467.639464][T25568] ? lockdep_hardirqs_on+0x7b/0x110 [ 2467.639485][T25568] ? do_fast_syscall_32+0x34/0x80 [ 2467.639509][T25568] ? irqentry_exit+0x10f/0x660 [ 2467.639535][T25568] do_fast_syscall_32+0x34/0x80 [ 2467.639561][T25568] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2467.639588][T25568] RIP: 0023:0xf7fa1539 [ 2467.639607][T25568] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2467.639626][T25568] RSP: 002b:00000000f549655c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 2467.639648][T25568] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000680 [ 2467.639664][T25568] RDX: 0000000000000118 RSI: 0000000000000000 RDI: 0000000000000000 [ 2467.639678][T25568] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2467.639691][T25568] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2467.639704][T25568] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2467.639736][T25568] [ 2467.869054][ T2244] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 2468.092262][ T593] usb 6-1: config 0 has an invalid descriptor of length 40, skipping remainder of the config [ 2468.107634][ T593] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2468.117699][ T593] usb 6-1: New USB device found, idVendor=0004, idProduct=0000, bcdDevice= 0.00 [ 2468.127912][ T2244] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 2468.179525][ T2244] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 2468.181850][ T593] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2468.188564][ T2244] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 2468.252308][T25580] netlink: 44 bytes leftover after parsing attributes in process `syz.4.9162'. [ 2468.262735][ T593] usb 6-1: config 0 descriptor?? [ 2468.342614][ T2244] usb 2-1: config 220 has no interface number 2 [ 2468.349051][T25580] netlink: 44 bytes leftover after parsing attributes in process `syz.4.9162'. [ 2468.358582][ T2244] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 2468.373146][ T2244] usb 2-1: config 220 interface 0 has no altsetting 0 [ 2468.404935][ T39] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 2468.486228][ T2244] usb 2-1: config 220 interface 76 has no altsetting 0 [ 2468.494065][ T2244] usb 2-1: config 220 interface 1 has no altsetting 0 [ 2468.539749][ T2244] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 2468.549044][ T2244] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2468.573443][ T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 2468.588553][ T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2468.618849][ T2244] usb 2-1: Product: syz [ 2468.635077][ T39] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=a2.bf [ 2468.644263][ T39] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2468.657321][ T2244] usb 2-1: Manufacturer: syz [ 2468.667399][ T2244] usb 2-1: SerialNumber: syz [ 2468.674623][ T39] usb 4-1: Product: syz [ 2468.678821][ T39] usb 4-1: Manufacturer: syz [ 2468.693689][ T39] usb 4-1: SerialNumber: syz [ 2468.772826][ T39] usb 4-1: config 0 descriptor?? [ 2468.883558][T25593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2468.894578][ T39] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 2468.916609][T25593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2469.114396][T25597] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9165'. [ 2469.125630][T25597] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9165'. [ 2469.233506][T25574] netlink: 'syz.3.9159': attribute type 2 has an invalid length. [ 2469.252697][T25574] !: entered promiscuous mode [ 2469.268606][T25574] netlink: 'syz.3.9159': attribute type 2 has an invalid length. [ 2469.276849][T25574] !: left promiscuous mode [ 2469.299694][ T39] ssu100 4-1:0.0: probe with driver ssu100 failed with error -110 [ 2470.671853][T25612] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9167'. [ 2470.803951][T16455] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2470.844210][T25612] netlink: 'syz.4.9167': attribute type 11 has an invalid length. [ 2470.889113][T25612] netlink: 'syz.4.9167': attribute type 12 has an invalid length. [ 2471.058834][T25612] vxlan0: entered promiscuous mode [ 2471.097523][ T3513] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2471.114433][ T6295] usb 6-1: USB disconnect, device number 44 [ 2471.296113][T16455] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2471.336157][ T2244] usb 2-1: selecting invalid altsetting 0 [ 2471.371226][ T2244] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 2471.378597][ T2244] uvcvideo 2-1:220.0: No valid video chain found. [ 2471.421096][ T3513] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2471.453676][ T3513] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2471.468203][ T2244] usb 2-1: selecting invalid altsetting 0 [ 2471.489262][ T2244] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 2471.516737][ T3513] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2471.539871][ T2244] usb 2-1: USB disconnect, device number 42 [ 2471.646857][T16455] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2471.662513][ T593] usb 4-1: USB disconnect, device number 11 [ 2471.845798][T25650] netlink: 'syz.3.9171': attribute type 1 has an invalid length. [ 2471.855174][T16455] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2471.953827][T25654] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 2472.266566][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2472.278858][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2472.286967][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2472.302524][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2472.326653][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2472.658638][T25654] bond2: (slave ip6gretap1): making interface the new active one [ 2472.668755][T25654] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 2472.678809][T25659] bond2: entered promiscuous mode [ 2472.683904][T25659] ip6gretap1: entered promiscuous mode [ 2472.757079][T25659] bond2: entered allmulticast mode [ 2472.819087][T25659] ip6gretap1: entered allmulticast mode [ 2473.107179][T25659] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2473.948513][T25744] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9175'. [ 2474.337715][T25750] netlink: 'syz.4.9176': attribute type 7 has an invalid length. [ 2474.346452][T25750] netlink: 'syz.4.9176': attribute type 8 has an invalid length. [ 2474.356703][ T30] audit: type=1326 audit(1766948566.186:2310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25747 comm="syz.4.9176" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa1539 code=0x7ffc0000 [ 2474.405388][ T30] audit: type=1326 audit(1766948566.186:2311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25747 comm="syz.4.9176" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fa1539 code=0x7ffc0000 [ 2474.472500][ T5833] Bluetooth: hci0: command tx timeout [ 2474.561697][ T30] audit: type=1326 audit(1766948566.186:2312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25747 comm="syz.4.9176" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa1539 code=0x7ffc0000 [ 2474.697868][ T30] audit: type=1326 audit(1766948566.186:2313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25747 comm="syz.4.9176" exe="/root/syz-executor" sig=0 arch=40000003 syscall=234 compat=1 ip=0xf7fa1539 code=0x7ffc0000 [ 2474.832888][ T30] audit: type=1326 audit(1766948566.186:2314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25747 comm="syz.4.9176" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa1539 code=0x7ffc0000 [ 2474.908300][ T30] audit: type=1326 audit(1766948566.186:2315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25747 comm="syz.4.9176" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fa1539 code=0x7ffc0000 [ 2475.031643][ T30] audit: type=1326 audit(1766948566.186:2316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25747 comm="syz.4.9176" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa1539 code=0x7ffc0000 [ 2475.167212][ T30] audit: type=1326 audit(1766948566.186:2317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25747 comm="syz.4.9176" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7fa1539 code=0x7ffc0000 [ 2475.225092][ T30] audit: type=1326 audit(1766948566.386:2318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25747 comm="syz.4.9176" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa1539 code=0x7ffc0000 [ 2475.465738][ T30] audit: type=1326 audit(1766948566.386:2319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25747 comm="syz.4.9176" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa1539 code=0x7ffc0000 [ 2475.572964][T16455] bond0 (unregistering): Released all slaves [ 2476.255548][T25813] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9178'. [ 2476.268497][T25813] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9178'. [ 2476.509973][ T5833] Bluetooth: hci0: command tx timeout [ 2477.251255][T25872] loop5: detected capacity change from 0 to 7 [ 2477.268537][T25872] Dev loop5: unable to read RDB block 7 [ 2477.274587][T25872] loop5: AHDI p1 p2 p3 [ 2477.278870][T25872] loop5: partition table partially beyond EOD, truncated [ 2477.291236][ T2244] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 2477.302239][T25872] loop5: p1 start 50331648 is beyond EOD, truncated [ 2477.338625][T25669] chnl_net:caif_netlink_parms(): no params data found [ 2477.352780][T25872] loop5: p2 size 1701016946 extends beyond EOD, truncated [ 2477.440356][T16455] hsr_slave_0: left promiscuous mode [ 2477.451218][T16455] hsr_slave_1: left promiscuous mode [ 2477.468132][ T2244] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 2477.478331][ T2244] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 2477.518496][ T2244] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 2477.542722][T16455] veth1_macvtap: left promiscuous mode [ 2477.548402][T16455] veth0_macvtap: left promiscuous mode [ 2477.554594][ T2244] usb 6-1: config 220 has no interface number 2 [ 2477.572642][ T2244] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 2477.589649][T16455] veth1_vlan: left promiscuous mode [ 2477.595071][T16455] veth0_vlan: left promiscuous mode [ 2477.609242][ T2244] usb 6-1: config 220 interface 0 has no altsetting 0 [ 2477.638131][ T2244] usb 6-1: config 220 interface 76 has no altsetting 0 [ 2477.662239][ T2244] usb 6-1: config 220 interface 1 has no altsetting 0 [ 2477.693493][T25890] ucma_write: process 241 (syz.1.9187) changed security contexts after opening file descriptor, this is not allowed. [ 2477.707003][ T2244] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 2477.707037][ T2244] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2477.707059][ T2244] usb 6-1: Product: syz [ 2477.707075][ T2244] usb 6-1: Manufacturer: syz [ 2477.707092][ T2244] usb 6-1: SerialNumber: syz [ 2478.586718][ T5833] Bluetooth: hci0: command tx timeout [ 2479.659699][ T2244] usb 6-1: selecting invalid altsetting 0 [ 2479.702804][ T2244] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 2479.743243][ T2244] uvcvideo 6-1:220.0: No valid video chain found. [ 2479.825419][ T2244] usb 6-1: selecting invalid altsetting 0 [ 2479.825452][ T2244] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 2479.834265][ T2244] usb 6-1: USB disconnect, device number 45 [ 2480.609850][T25937] netlink: 584 bytes leftover after parsing attributes in process `syz.4.9194'. [ 2480.711571][ T5833] Bluetooth: hci0: command tx timeout [ 2482.317716][T25975] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9196'. [ 2482.368462][T25993] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9196'. [ 2482.405407][T25669] bridge0: port 1(bridge_slave_0) entered blocking state [ 2482.420444][T25975] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9196'. [ 2482.430332][T25669] bridge0: port 1(bridge_slave_0) entered disabled state [ 2482.437591][T25669] bridge_slave_0: entered allmulticast mode [ 2482.445012][T25975] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9196'. [ 2482.457778][T25669] bridge_slave_0: entered promiscuous mode [ 2482.475916][T25669] bridge0: port 2(bridge_slave_1) entered blocking state [ 2482.483233][T25669] bridge0: port 2(bridge_slave_1) entered disabled state [ 2482.492097][T25669] bridge_slave_1: entered allmulticast mode [ 2482.523375][T26007] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9197'. [ 2482.540294][T25669] bridge_slave_1: entered promiscuous mode [ 2482.609522][T26008] fuse: Bad value for 'fd' [ 2482.907845][T25669] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2482.988395][T25669] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2483.333741][T25669] team0: Port device team_slave_0 added [ 2483.413008][T25669] team0: Port device team_slave_1 added [ 2483.659829][T25669] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2483.678317][T26096] loop5: detected capacity change from 0 to 7 [ 2483.690946][T26096] Dev loop5: unable to read RDB block 7 [ 2483.696569][T26096] loop5: AHDI p1 p2 p3 [ 2483.708688][T25669] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2483.806677][T25669] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2483.817591][T26096] loop5: partition table partially beyond EOD, truncated [ 2483.817850][T26096] loop5: p1 start 50331648 is beyond EOD, truncated [ 2483.817875][T26096] loop5: p2 size 1701016946 extends beyond EOD, truncated [ 2484.151446][T26117] loop5: detected capacity change from 0 to 7 [ 2484.189476][ T2244] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 2484.192948][T25669] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2484.204949][T26117] Dev loop5: unable to read RDB block 7 [ 2484.236814][T26117] loop5: AHDI p1 p2 p3 [ 2484.242199][T26117] loop5: partition table partially beyond EOD, truncated [ 2484.267592][T25669] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2484.328821][T26117] loop5: p1 start 50331648 is beyond EOD, truncated [ 2484.348857][T26117] loop5: p2 size 1701016946 extends beyond EOD, truncated [ 2484.400808][ T2244] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 2484.409711][ T2244] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 2484.410049][T25669] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2484.555295][ T2244] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 2484.586697][ T2244] usb 2-1: config 220 has no interface number 2 [ 2484.598870][ T2244] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 2484.612965][ T2244] usb 2-1: config 220 interface 0 has no altsetting 0 [ 2484.623382][ T2244] usb 2-1: config 220 interface 76 has no altsetting 0 [ 2484.630571][ T2244] usb 2-1: config 220 interface 1 has no altsetting 0 [ 2484.650404][ T2244] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 2484.662797][ T2244] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2484.678672][ T2244] usb 2-1: Product: syz [ 2484.683498][ T2244] usb 2-1: Manufacturer: syz [ 2484.688127][ T2244] usb 2-1: SerialNumber: syz [ 2484.800197][T26130] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9206'. [ 2485.203859][T25669] hsr_slave_0: entered promiscuous mode [ 2485.213792][T25669] hsr_slave_1: entered promiscuous mode [ 2485.221557][T25669] debugfs: 'hsr0' already exists in 'hsr' [ 2485.227398][T25669] Cannot create hsr debugfs directory [ 2485.966002][T26209] netlink: 584 bytes leftover after parsing attributes in process `syz.4.9208'. [ 2486.759420][ T2244] usb 2-1: selecting invalid altsetting 0 [ 2486.765739][ T2244] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 2486.838096][ T2244] uvcvideo 2-1:220.0: No valid video chain found. [ 2486.961205][ T2244] usb 2-1: selecting invalid altsetting 0 [ 2487.006482][ T2244] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 2487.110766][ T2244] usb 2-1: USB disconnect, device number 43 [ 2487.432404][T26271] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9215'. [ 2487.857935][T25669] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2487.883805][T25669] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2487.924110][T25669] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2487.947281][T25669] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2488.223220][T25669] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2488.292501][T25669] 8021q: adding VLAN 0 to HW filter on device team0 [ 2488.338244][T11616] bridge0: port 1(bridge_slave_0) entered blocking state [ 2488.345479][T11616] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2488.404496][T18893] bridge0: port 2(bridge_slave_1) entered blocking state [ 2488.411690][T18893] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2488.896306][T25669] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2489.501966][T25669] veth0_vlan: entered promiscuous mode [ 2489.545702][T25669] veth1_vlan: entered promiscuous mode [ 2489.633737][T25669] veth0_macvtap: entered promiscuous mode [ 2489.660086][T25669] veth1_macvtap: entered promiscuous mode [ 2489.807915][T25669] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2490.089270][ T2244] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 2490.192519][T25669] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2490.465817][ T2244] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 2490.526942][ T2244] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2490.641730][T18893] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2490.674437][ T2244] usb 6-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=a2.bf [ 2490.682466][T18893] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2490.704651][ T2244] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2490.723996][T18893] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2490.763947][ T2244] usb 6-1: Product: syz [ 2490.768450][ T2244] usb 6-1: Manufacturer: syz [ 2490.793167][ T2244] usb 6-1: SerialNumber: syz [ 2490.817642][T18893] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2490.827890][ T2244] usb 6-1: config 0 descriptor?? [ 2490.858093][ T2244] ssu100 6-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 2491.100821][T26334] netlink: 'syz.5.9221': attribute type 2 has an invalid length. [ 2491.200381][T26342] netlink: 'syz.5.9221': attribute type 2 has an invalid length. [ 2491.248060][T26334] !: entered promiscuous mode [ 2491.270198][ T2244] ssu100 6-1:0.0: probe with driver ssu100 failed with error -110 [ 2491.510345][T26342] !: left promiscuous mode [ 2491.943627][T15256] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2492.132377][T15256] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2492.181852][T26365] netlink: 584 bytes leftover after parsing attributes in process `syz.3.9226'. [ 2492.352806][T25674] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2492.363176][T25674] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2493.270818][T26384] PKCS7: Unknown OID: [4] 0.38.35.0.951690.11253 [ 2493.285217][T26384] PKCS7: Only support pkcs7_signedData type [ 2493.680665][T14137] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 2493.768950][ T593] usb 6-1: USB disconnect, device number 46 [ 2493.903206][T14137] usb 2-1: config 0 has an invalid descriptor of length 40, skipping remainder of the config [ 2493.943544][T14137] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2493.984341][T14137] usb 2-1: New USB device found, idVendor=0004, idProduct=0000, bcdDevice= 0.00 [ 2494.010614][T14137] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2494.040154][T14137] usb 2-1: config 0 descriptor?? [ 2494.544890][T26414] team0: Port device ip6gre0 removed [ 2494.582878][ T6295] skbuff: skb_under_panic: text:ffffffff8a25ec78 len:136 put:40 head:ffff8880438bc000 data:ffff8880438bbfe8 tail:0x70 end:0x6c0 dev:team0 [ 2494.625740][ T6295] ------------[ cut here ]------------ [ 2494.631730][ T6295] kernel BUG at net/core/skbuff.c:213! [ 2494.655581][ T6295] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 2494.661888][ T6295] CPU: 0 UID: 0 PID: 6295 Comm: kworker/0:10 Tainted: G L syzkaller #0 PREEMPT(full) [ 2494.672940][ T6295] Tainted: [L]=SOFTLOCKUP [ 2494.677280][ T6295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2494.687358][ T6295] Workqueue: mld mld_ifc_work [ 2494.692076][ T6295] RIP: 0010:skb_panic+0x157/0x160 [ 2494.697139][ T6295] Code: c7 60 9c 6f 8c 48 8b 74 24 08 48 8b 54 24 10 8b 0c 24 44 8b 44 24 04 4d 89 e9 50 55 41 57 41 56 e8 ce 6a f5 ff 48 83 c4 20 90 <0f> 0b cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2494.716791][ T6295] RSP: 0018:ffffc9001b16f440 EFLAGS: 00010282 [ 2494.722886][ T6295] RAX: 0000000000000087 RBX: dffffc0000000000 RCX: 713b50b313a8ec00 [ 2494.730883][ T6295] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 2494.738875][ T6295] RBP: 00000000000006c0 R08: ffffc9001b16f1a7 R09: 1ffff9200362de34 [ 2494.746871][ T6295] R10: dffffc0000000000 R11: fffff5200362de35 R12: ffff88803070e8d0 [ 2494.754971][ T6295] R13: ffff8880438bc000 R14: ffff8880438bbfe8 R15: 0000000000000070 [ 2494.762977][ T6295] FS: 0000000000000000(0000) GS:ffff888125e1f000(0000) knlGS:0000000000000000 [ 2494.771929][ T6295] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2494.778538][ T6295] CR2: 000000008016d018 CR3: 000000005f932000 CR4: 00000000003526f0 [ 2494.786543][ T6295] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2494.794534][ T6295] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2494.802523][ T6295] Call Trace: [ 2494.805822][ T6295] [ 2494.808781][ T6295] ? ip6gre_header+0xc8/0x790 [ 2494.813499][ T6295] ? ip6gre_header+0xc8/0x790 [ 2494.818202][ T6295] skb_push+0xc3/0xe0 [ 2494.822219][ T6295] ip6gre_header+0xc8/0x790 [ 2494.826763][ T6295] ? __pfx_ip6gre_header+0x10/0x10 [ 2494.831900][ T6295] ? neigh_connected_output+0x1ea/0x460 [ 2494.837475][ T6295] ? read_seqbegin+0xac/0x180 [ 2494.842172][ T6295] ? lockdep_hardirqs_on+0x7b/0x110 [ 2494.847391][ T6295] ? __pfx_ip6gre_header+0x10/0x10 [ 2494.852529][ T6295] neigh_connected_output+0x286/0x460 [ 2494.857928][ T6295] ? ip6_output+0x126/0x550 [ 2494.862450][ T6295] ip6_output+0x340/0x550 [ 2494.866811][ T6295] NF_HOOK+0x9e/0x380 [ 2494.870819][ T6295] ? NF_HOOK+0x101/0x380 [ 2494.875074][ T6295] ? __pfx_NF_HOOK+0x10/0x10 [ 2494.879677][ T6295] ? __pfx_dst_output+0x10/0x10 [ 2494.884545][ T6295] ? lockdep_hardirqs_on+0x7b/0x110 [ 2494.889754][ T6295] ? __local_bh_enable_ip+0xd0/0x130 [ 2494.895054][ T6295] ? icmp6_dst_alloc+0x3a5/0x420 [ 2494.900008][ T6295] mld_sendpack+0x8d4/0xe60 [ 2494.904544][ T6295] ? mld_sendpack+0x1e7/0xe60 [ 2494.909248][ T6295] ? __pfx_mld_sendpack+0x10/0x10 [ 2494.914304][ T6295] mld_ifc_work+0x83e/0xd60 [ 2494.918819][ T6295] ? process_scheduled_works+0x9ef/0x1770 [ 2494.924547][ T6295] process_scheduled_works+0xad1/0x1770 [ 2494.930120][ T6295] ? __pfx_process_scheduled_works+0x10/0x10 [ 2494.936122][ T6295] ? do_raw_spin_lock+0x121/0x290 [ 2494.941170][ T6295] worker_thread+0x8a0/0xda0 [ 2494.945789][ T6295] kthread+0x711/0x8a0 [ 2494.949881][ T6295] ? __pfx_worker_thread+0x10/0x10 [ 2494.955107][ T6295] ? __pfx_kthread+0x10/0x10 [ 2494.959718][ T6295] ? _raw_spin_unlock_irq+0x23/0x50 [ 2494.964945][ T6295] ? __pfx_kthread+0x10/0x10 [ 2494.969553][ T6295] ret_from_fork+0x510/0xa50 [ 2494.974164][ T6295] ? __pfx_ret_from_fork+0x10/0x10 [ 2494.979291][ T6295] ? __switch_to+0xc9e/0x1480 [ 2494.983991][ T6295] ? __pfx_kthread+0x10/0x10 [ 2494.988601][ T6295] ret_from_fork_asm+0x1a/0x30 [ 2494.993393][ T6295] [ 2494.996438][ T6295] Modules linked in: [ 2495.002535][ T6295] ---[ end trace 0000000000000000 ]--- [ 2495.061475][T26415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2495.252430][T26415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2495.562767][ T6295] RIP: 0010:skb_panic+0x157/0x160 [ 2495.585437][ T6295] Code: c7 60 9c 6f 8c 48 8b 74 24 08 48 8b 54 24 10 8b 0c 24 44 8b 44 24 04 4d 89 e9 50 55 41 57 41 56 e8 ce 6a f5 ff 48 83 c4 20 90 <0f> 0b cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2495.642856][ T6295] RSP: 0018:ffffc9001b16f440 EFLAGS: 00010282 [ 2495.656854][ T6295] RAX: 0000000000000087 RBX: dffffc0000000000 RCX: 713b50b313a8ec00 [ 2495.698985][ T6295] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 2495.724725][ T6295] RBP: 00000000000006c0 R08: ffffc9001b16f1a7 R09: 1ffff9200362de34 [ 2495.757681][ T6295] R10: dffffc0000000000 R11: fffff5200362de35 R12: ffff88803070e8d0 [ 2495.782249][ T6295] R13: ffff8880438bc000 R14: ffff8880438bbfe8 R15: 0000000000000070 [ 2495.797303][ T6295] FS: 0000000000000000(0000) GS:ffff888125e1f000(0000) knlGS:0000000000000000 [ 2495.817006][ T6295] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2495.824611][ T6295] CR2: 00007f0044dd5f58 CR3: 000000008f466000 CR4: 00000000003526f0 [ 2495.833535][ T6295] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2495.882783][ T6295] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2495.899867][ T6295] Kernel panic - not syncing: Fatal exception [ 2495.906559][ T6295] Kernel Offset: disabled [ 2495.910901][ T6295] Rebooting in 86400 seconds..